x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r9 = dup2(r8, r8) syz_kvm_setup_cpu$x86(r9, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r7, 0xc008aeb0, &(0x7f0000000280)={0x2, [0x5, 0x80]}) clone3(&(0x7f00000005c0)={0xc04e1db44a1574b2, 0x0, &(0x7f0000000440), &(0x7f0000000480), {}, 0x0, 0x0, 0x0, 0x0}, 0x40) getegid() sendmsg$unix(r4, 0x0, 0x40000) r10 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x410000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r10, 0x80045500, &(0x7f0000000180)) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$tipc(r10, 0x0, 0x0) sendto$inet6(r2, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r2, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 04:05:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000026, 0x100000000000000) 04:05:20 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:20 executing program 5: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$void(r0, 0xc0045878) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x800002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x68002100, 0x0, 0x0, 0x0, 0x0) 04:05:20 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000180)={{0x9, 0x0, 0x0, 0xde9, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 'syz1\x00', &(0x7f0000000940)}) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setuid(0x0) getegid() r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x2d2, 0x0, 0x0) getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 04:05:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000027, 0x100000000000000) [ 585.386347][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 585.392155][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 585.403745][T22718] overlayfs: workdir and upperdir must be separate subtrees [ 585.485052][T22712] overlayfs: workdir and upperdir must be separate subtrees [ 585.495342][T22730] IPVS: ftp: loaded support on port[0] = 21 04:05:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:21 executing program 0: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'vlan0\x00', {'team_slave_0\x00'}}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x8001, 0xfd, 0x80000001, 0x7cd, 0x2, 0x1, 0xfffffffffffeffff, 0x1, 0xfffffffffffffffa, 0x10001, 0xa6, 0x1, 0x1, 0x400000, 0x100]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={r2, 0x9}, &(0x7f00000001c0)=0x8) 04:05:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000028, 0x100000000000000) 04:05:21 executing program 0: prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0xff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8000, 0x7f, 0x40}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) finit_module(r2, &(0x7f0000000300)=',[:/trusted\x00', 0x3) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r3, 0x2081ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='wlan0&\x00', r3}, 0x10) mlockall(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) ioctl$RTC_UIE_OFF(r4, 0x7004) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') pread64(r5, 0x0, 0x0, 0x2809) mq_timedsend(r5, &(0x7f0000000100)="339ce5fd46cab5d185be5e4e240881745da3e7c2b8ffcb5158de6c7a52eaad", 0x1f, 0x28c8, &(0x7f0000000140)={0x0, 0x989680}) 04:05:21 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x80000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000029, 0x100000000000000) [ 585.971595][T22747] overlayfs: workdir and upperdir must be separate subtrees [ 585.996382][ T8745] tipc: TX() has been purged, node left! [ 586.017589][T22753] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:21 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x80000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ioctl$FIBMAP(0xffffffffffffffff, 0x227a, &(0x7f00000002c0)) ioctl$FIBMAP(0xffffffffffffffff, 0x227a, &(0x7f00000002c0)=0x200) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}) fstat(r3, 0x0) setresgid(0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x1c, &(0x7f0000000000), 0x20a1562f) openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0xa0400, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x40000, 0x0) ioctl$int_in(r5, 0x800000c004500a, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x2761, 0x0) write$cgroup_pid(r6, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x1df) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x2761, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000001c0)={0x10, 0x0, 0xfffffffe}) fstat(r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000180)='./bus\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xad00) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x0, r9, r10, 0x0, 0x34}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1f}) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20040888, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x2, 0x4) rmdir(0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x30) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r11 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r11, 0x7fff) r12 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r12, 0x401c5820, &(0x7f00000001c0)={0x10}) sendfile(r1, r12, 0x0, 0x3) 04:05:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:21 executing program 3: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000180)={{0x9, 0x0, 0x0, 0xde9, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 'syz1\x00', &(0x7f0000000940)}) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setuid(0x0) getegid() r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x2d2, 0x0, 0x0) getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 04:05:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000002a, 0x100000000000000) [ 586.275455][T22768] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:21 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x80000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:22 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000180)={{0x9, 0x0, 0x0, 0xde9, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 'syz1\x00', &(0x7f0000000940)}) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setuid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setuid(0x0) getegid() r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x2d2, 0x0, 0x0) getegid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 586.521421][T22774] overlayfs: workdir and upperdir must be separate subtrees 04:05:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000002b, 0x100000000000000) 04:05:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 586.657035][T22786] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 586.910058][T22796] overlayfs: workdir and upperdir must be separate subtrees 04:05:22 executing program 0: prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0xff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8000, 0x7f, 0x40}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) finit_module(r2, &(0x7f0000000300)=',[:/trusted\x00', 0x3) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r3, 0x2081ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='wlan0&\x00', r3}, 0x10) mlockall(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) ioctl$RTC_UIE_OFF(r4, 0x7004) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') pread64(r5, 0x0, 0x0, 0x2809) mq_timedsend(r5, &(0x7f0000000100)="339ce5fd46cab5d185be5e4e240881745da3e7c2b8ffcb5158de6c7a52eaad", 0x1f, 0x28c8, &(0x7f0000000140)={0x0, 0x989680}) 04:05:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000002c, 0x100000000000000) 04:05:22 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x80000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad119"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:22 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0x6) r3 = accept(r1, &(0x7f00000001c0)=@generic, &(0x7f0000000240)=0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r3}) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) unlinkat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x20) [ 587.591006][T22814] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:23 executing program 1: prctl$PR_GET_DUMPABLE(0x3) perf_event_open(&(0x7f000001d000)={0x1, 0xff76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2}, 0xd8) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x8000, 0x7f, 0x40}) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) finit_module(r2, &(0x7f0000000300)=',[:/trusted\x00', 0x3) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r3, 0x2081ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='wlan0&\x00', r3}, 0x10) mlockall(0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/route\x00') preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0xf0ffff) ioctl$RTC_UIE_OFF(r4, 0x7004) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') pread64(r5, 0x0, 0x0, 0x2809) mq_timedsend(r5, &(0x7f0000000100)="339ce5fd46cab5d185be5e4e240881745da3e7c2b8ffcb5158de6c7a52eaad", 0x1f, 0x28c8, &(0x7f0000000140)={0x0, 0x989680}) 04:05:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000002d, 0x100000000000000) 04:05:23 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 587.730643][T22815] overlayfs: workdir and upperdir must be separate subtrees 04:05:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad119"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 587.961874][T22834] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:23 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000002e, 0x100000000000000) 04:05:23 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:23 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0x6) r3 = accept(r1, &(0x7f00000001c0)=@generic, &(0x7f0000000240)=0x80) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r3}) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) unlinkat(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x20) [ 588.326725][T22840] overlayfs: workdir and upperdir must be separate subtrees 04:05:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad119"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000002f, 0x100000000000000) 04:05:24 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:24 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 589.226234][T22867] [ 589.244275][T22867] ********************************************************** [ 589.266391][T22867] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 589.286892][T22867] ** ** [ 589.301184][T22867] ** trace_printk() being used. Allocating extra memory. ** 04:05:24 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 589.329442][T22867] ** ** [ 589.347223][T22867] ** This means that this is a DEBUG kernel and it is ** [ 589.390412][T22867] ** unsafe for production use. ** [ 589.415778][T22874] overlayfs: workdir and upperdir must be separate subtrees [ 589.419724][T22867] ** ** [ 589.485501][T22867] ** If you see this message and you are not debugging ** [ 589.515816][T22867] ** the kernel, report this immediately to your vendor! ** [ 589.536452][T22867] ** ** [ 589.586343][T22867] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 589.593772][T22867] ********************************************************** 04:05:25 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x95, 0x0, 0x0, 0x0, 0x0, 0x80009a79}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x26f) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x90, 0x1, 0x8, 0x4, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x29}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5d7a}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wf\ano=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000fda8df2504000001"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x2000c040) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000000)='syz0\x00') bind$isdn(r5, &(0x7f00000003c0)={0x22, 0x0, 0x1, 0x0, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_dccp_int(r6, 0x21, 0x6, &(0x7f00000005c0)=0x1, 0x4) bind$bt_rfcomm(r5, &(0x7f0000000340)={0x1f, {0x8d95, 0x80000000, 0x84, 0x9, 0x6, 0x175a}, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r8, 0x5, 0x0, 0x0, {{}, {}, {0xc, 0x18, {0x0, @bearer=@l2={'eth'}}}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x80) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8001444}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r8, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x400440c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r9, r10) 04:05:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000030, 0x100000000000000) 04:05:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00)='NLBL_CALIPSO\x00') setxattr$security_ima(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000300)=@ng={0x4, 0x6, "050e50ac13"}, 0x7, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) pipe(0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000340)=@isdn={0x22, 0x81, 0x2, 0x5, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)="c24f62cb18419aef62dec8743108b80ef1575990315169103804a8f510d5409871da4473b977557c96497bb0ca0453b370b1bfdfc374dacb649af56321c8155382fb0a170ef99e78904edcd7a64e54d1ef58f242dba684c5a33881e322ee0348b4082a1bf644ffc4a0d592df", 0x6c}, {&(0x7f0000000480)="2c2c4d67750b83aaadefadce1829da97b394821c253b65770441758037deaab3fe307dc3ca35aac8c0c8f4f0fe2dc1a61792ea998919ea13a57092b43ab1b25a60ddf4c964732f5570ef0f3b3611a1e2c1e511246185b9f31db0cee1c9745d9436e90bf7c46d0dbb9be68c2ac1ee4093f26cb7893223f1635a68b6f1d38e6e8a349018326d53cd63362853447912cc2c33be0bdb12ef7b53f2f8885fdcbf0bf75cf7586423189e15dccdfe3a2ac8af21486e89e97a96c6033081", 0xba}, {&(0x7f0000000240)="0454999e78a900d6d3ac900502ee77ec59bb210e1be89d7e17c576faa056fba986fac2b0de1d9707bef74f03267f0a27", 0x30}, {&(0x7f0000000540)="7bf61357227337d853eba8a9271c80653d56abc6432703fb5adab730c5f298eefeb4846bcb53e25a191e90570f2b2e471d12108b1066fa8abf5d10949ccd5b6c0cf9361547e73ce4d02dbbdb3fb4607acfe9e8560235d7d2c7e51ddd862ba53085b90cb670b0", 0x66}], 0x4, &(0x7f00000005c0)=[{0x38, 0x8a, 0x7, "c90d99a411b2974e096e05b98da01f707a78a7077efc9864ba3568d509a5b789a8173a"}, {0x88, 0x88, 0x3, "9883139352cf19c5fbc0289c52bce38dbdcd26351073482cc467497ac355aae00e76376d1ce9a2618279bff0d5d6d49a2c8fe0323f0dd29e0405517eb82360f2aa4737291171abb82df70ed4fbb13f67840041e8af4959e7b1e2eef43b2f32ab57d24fa48973dd481057949ebafd5c19d7189a1e7fbb7c"}, {0x88, 0x118, 0x1000, "642f402eaebfb414f378d74082ca181c28990904731b0d39e83bea212d5c64eb79f1ee6b018709af9ffe2eb7a92fd714044c46349b739d77fc8e58e6d25cd32182c2f45b268aafe6dc437f18fb4ef6a790dc894112da1a91e976f8bd6c3636516b541b43386ffc6ffac526614cfac0a32fd174"}, {0x58, 0x109, 0x1ff, "9a9e33ef5ca0906bc13bb23ac5b45ca9a875190bc33776caa2f211af511a76c8c5eba31d2fe31350920b6903e89d4dc6ff69900e4dfcca396a927f4460092a44c24e850c7109"}], 0x1a0}, 0x4040000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="220000e4776b6e0131d6aa8689c3df0000000000608f8d028ef482d5e21d9524b04e51d7fa361ba8e9656047627cb280b8849b62ed4805245f067b79989ef0c18edf7b6744568dcb79f2577d9f4ead4a3b2d7f6bf31d506f746477de33979e01c0f59ad541b9cebc0aff9130d9b2449ae1980087513e0af366f450030bd14bdbab00bb28af7e37bfde3e21c23aab43fa55a58b8727443747dfb692a1f56e44e782caa5abf9b318cf24be8af199a3418d37fd1feba3c8923d2f08950936783a23b0553d1d83e1b25b210bb117297c9690fbb52b9e00175baba9b116fc695649846dbc", @ANYRES16=r4, @ANYBLOB="000825bd7000fcdbdf250b0000000500080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x45000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x800}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x800}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10004, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000004000/0x2000)=nil) [ 590.111374][T22889] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 590.175728][T22889] net_ratelimit: 33 callbacks suppressed [ 590.175735][T22889] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:05:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000031, 0x100000000000000) 04:05:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 590.326979][T22890] overlayfs: workdir and upperdir must be separate subtrees 04:05:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a00)='NLBL_CALIPSO\x00') setxattr$security_ima(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f0000000300)=@ng={0x4, 0x6, "050e50ac13"}, 0x7, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) pipe(0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000340)=@isdn={0x22, 0x81, 0x2, 0x5, 0x8}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000400)="c24f62cb18419aef62dec8743108b80ef1575990315169103804a8f510d5409871da4473b977557c96497bb0ca0453b370b1bfdfc374dacb649af56321c8155382fb0a170ef99e78904edcd7a64e54d1ef58f242dba684c5a33881e322ee0348b4082a1bf644ffc4a0d592df", 0x6c}, {&(0x7f0000000480)="2c2c4d67750b83aaadefadce1829da97b394821c253b65770441758037deaab3fe307dc3ca35aac8c0c8f4f0fe2dc1a61792ea998919ea13a57092b43ab1b25a60ddf4c964732f5570ef0f3b3611a1e2c1e511246185b9f31db0cee1c9745d9436e90bf7c46d0dbb9be68c2ac1ee4093f26cb7893223f1635a68b6f1d38e6e8a349018326d53cd63362853447912cc2c33be0bdb12ef7b53f2f8885fdcbf0bf75cf7586423189e15dccdfe3a2ac8af21486e89e97a96c6033081", 0xba}, {&(0x7f0000000240)="0454999e78a900d6d3ac900502ee77ec59bb210e1be89d7e17c576faa056fba986fac2b0de1d9707bef74f03267f0a27", 0x30}, {&(0x7f0000000540)="7bf61357227337d853eba8a9271c80653d56abc6432703fb5adab730c5f298eefeb4846bcb53e25a191e90570f2b2e471d12108b1066fa8abf5d10949ccd5b6c0cf9361547e73ce4d02dbbdb3fb4607acfe9e8560235d7d2c7e51ddd862ba53085b90cb670b0", 0x66}], 0x4, &(0x7f00000005c0)=[{0x38, 0x8a, 0x7, "c90d99a411b2974e096e05b98da01f707a78a7077efc9864ba3568d509a5b789a8173a"}, {0x88, 0x88, 0x3, "9883139352cf19c5fbc0289c52bce38dbdcd26351073482cc467497ac355aae00e76376d1ce9a2618279bff0d5d6d49a2c8fe0323f0dd29e0405517eb82360f2aa4737291171abb82df70ed4fbb13f67840041e8af4959e7b1e2eef43b2f32ab57d24fa48973dd481057949ebafd5c19d7189a1e7fbb7c"}, {0x88, 0x118, 0x1000, "642f402eaebfb414f378d74082ca181c28990904731b0d39e83bea212d5c64eb79f1ee6b018709af9ffe2eb7a92fd714044c46349b739d77fc8e58e6d25cd32182c2f45b268aafe6dc437f18fb4ef6a790dc894112da1a91e976f8bd6c3636516b541b43386ffc6ffac526614cfac0a32fd174"}, {0x58, 0x109, 0x1ff, "9a9e33ef5ca0906bc13bb23ac5b45ca9a875190bc33776caa2f211af511a76c8c5eba31d2fe31350920b6903e89d4dc6ff69900e4dfcca396a927f4460092a44c24e850c7109"}], 0x1a0}, 0x4040000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r4 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="220000e4776b6e0131d6aa8689c3df0000000000608f8d028ef482d5e21d9524b04e51d7fa361ba8e9656047627cb280b8849b62ed4805245f067b79989ef0c18edf7b6744568dcb79f2577d9f4ead4a3b2d7f6bf31d506f746477de33979e01c0f59ad541b9cebc0aff9130d9b2449ae1980087513e0af366f450030bd14bdbab00bb28af7e37bfde3e21c23aab43fa55a58b8727443747dfb692a1f56e44e782caa5abf9b318cf24be8af199a3418d37fd1feba3c8923d2f08950936783a23b0553d1d83e1b25b210bb117297c9690fbb52b9e00175baba9b116fc695649846dbc", @ANYRES16=r4, @ANYBLOB="000825bd7000fcdbdf250b0000000500080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x45000}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r4, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x800}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x1}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x800}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10004, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000004000/0x2000)=nil) [ 590.469367][T22896] 9pnet: Insufficient options for proto=fd 04:05:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000032, 0x100000000000000) 04:05:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 590.649178][T22917] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 590.696415][T22917] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:05:26 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900fd0000000a000000000000000000000000000000000000000000000200000000000000000200010000000000e8fffffc0000000005000500000000000a0000d3c9f10000000000ff0200000000000000000000000000010000000000000000"], 0x98}}, 0x0) [ 590.812926][T22920] overlayfs: workdir and upperdir must be separate subtrees 04:05:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000033, 0x100000000000000) 04:05:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 591.107162][T22938] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 591.146327][ C1] protocol 88fb is buggy, dev hsr_slave_0 04:05:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendto$rose(r1, &(0x7f00000010c0)="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", 0xfffffffffffffe13, 0x24004004, 0x0, 0xfffffdef) [ 591.152178][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:05:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000034, 0x100000000000000) [ 591.177749][T22938] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:05:26 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x10}, 0x80, 0x2, 0x3, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000740)={0x0, 0x8, 0x7, r0, 0x0, &(0x7f0000000400)={0x9d00d2, 0x5, [], @string=&(0x7f0000000200)=0x3f}}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm-monitor\x00', 0x4000, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000840)='cpuacct.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)={0x0, r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x4000, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x33, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0xdbd, 0x9, 0xf74a, 0xfffffff800000000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001980)={0x0, 0x0, 0x1000000000, 0x806}, 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) getpeername(r6, &(0x7f00000006c0)=@nfc_llcp, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) setsockopt$llc_int(r7, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r7, &(0x7f0000000040)={0x1a, 0x337, 0x0, 0x4, 0x3, 0x7f, @random="c0441d4f2c36"}, 0x10) socket(0x10, 0x80003, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYBLOB="21000300aaaa0500aa1eaaaaaaaaaabbffffffffffff9142821309a07f4a3ddf9a754c6a04000000000000002b47cabd1ef34b5dcf5e11100000bea4b4a57b5e61bc18229f336b8aae871b2bc8f04ffda9d257887553540935b0c26fd442209d9e421e8900007d75eec08e821154b8ae4f8459d9bdc57cb5d257d1f0a25789ca2a2f8948790002f7e4c1409b3569e43febaac6c84416dbcea600a1dfcf60a96aef4d7f092f18b899579913d076ea1687c36b044fade3b2b75ff86d57008c3d363f17f918d1"]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000340)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0xcf5, 0x4, 0x4, 0x20000000, 0x0, {0x7, 0x8}, {}, 0x1}) write(0xffffffffffffffff, &(0x7f0000000080)="24000000210099f0003bf90000ed190e020008160004000000ba0080080002007fbcfe6f", 0x24) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r9, &(0x7f00000005c0)=""/223, 0xfc61) r10 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SG_GET_ACCESS_COUNT(r10, 0x2289, &(0x7f0000000100)) ioctl$KDGETLED(r10, 0x4b31, &(0x7f0000000180)) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000300)={{0x69, 0xf7, 0x2, 0x80, 0x0, 0x3}, 0x3f}) fadvise64(r5, 0x0, 0x4, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) [ 591.226327][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 591.232339][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 591.238259][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 591.244022][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 591.249840][ C0] protocol 88fb is buggy, dev hsr_slave_0 04:05:26 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 591.451345][T22942] overlayfs: workdir and upperdir must be separate subtrees 04:05:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="2400000052001f0014f9f407112c04091c0007ed10001e550a", 0x19) socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="168000005138c0f235c09e0f3f619005cb1988aebd50f0fe3c9b22701ed5d5e489f451c636b73a671cb39d32ce2799a39c8f20abb2fefcc874c67185fc995f8d8d7cd5dc0dd5ac7f2125ed621149c6fa918e65ac5694d5c87da7533e2e5c78a4a0b92814532d9c17db66d06b21b88f4ded45ae078c17ef55b66bddfaaf0d7349093e80131b7fcbe079e00836fdd5f3cd7272bff85c1bf4f12e5023bf4ee81ab7b781b3120d58003d4c76d7d107142fa0f10c2023c3cfa1effaa9a42c0baa474348e4b9bd8954145baabcf8395df63190afea8b66d07f73"], &(0x7f0000000200)=0x1e) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 04:05:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000035, 0x100000000000000) 04:05:27 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 591.640204][ T27] audit: type=1804 audit(1579061127.117:467): pid=22955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir511968674/syzkaller.xcVREQ/604/file0" dev="sda1" ino=18016 res=1 04:05:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:27 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:27 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x10}, 0x80, 0x2, 0x3, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000740)={0x0, 0x8, 0x7, r0, 0x0, &(0x7f0000000400)={0x9d00d2, 0x5, [], @string=&(0x7f0000000200)=0x3f}}) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm-monitor\x00', 0x4000, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000840)='cpuacct.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)={0x0, r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x4000, 0xfffffffffffffffc, 0x8, 0x0, 0x0, 0x33, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x0, 0xdbd, 0x9, 0xf74a, 0xfffffff800000000}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001980)={0x0, 0x0, 0x1000000000, 0x806}, 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) getpeername(r6, &(0x7f00000006c0)=@nfc_llcp, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000002c0)={0x28, 0x0, 0x2710}, 0x10) setsockopt$llc_int(r7, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r7, &(0x7f0000000040)={0x1a, 0x337, 0x0, 0x4, 0x3, 0x7f, @random="c0441d4f2c36"}, 0x10) socket(0x10, 0x80003, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000480)=ANY=[@ANYBLOB="21000300aaaa0500aa1eaaaaaaaaaabbffffffffffff9142821309a07f4a3ddf9a754c6a04000000000000002b47cabd1ef34b5dcf5e11100000bea4b4a57b5e61bc18229f336b8aae871b2bc8f04ffda9d257887553540935b0c26fd442209d9e421e8900007d75eec08e821154b8ae4f8459d9bdc57cb5d257d1f0a25789ca2a2f8948790002f7e4c1409b3569e43febaac6c84416dbcea600a1dfcf60a96aef4d7f092f18b899579913d076ea1687c36b044fade3b2b75ff86d57008c3d363f17f918d1"]) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r8, 0x5411, &(0x7f0000000340)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)={0xcf5, 0x4, 0x4, 0x20000000, 0x0, {0x7, 0x8}, {}, 0x1}) write(0xffffffffffffffff, &(0x7f0000000080)="24000000210099f0003bf90000ed190e020008160004000000ba0080080002007fbcfe6f", 0x24) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r9, &(0x7f00000005c0)=""/223, 0xfc61) r10 = openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$SG_GET_ACCESS_COUNT(r10, 0x2289, &(0x7f0000000100)) ioctl$KDGETLED(r10, 0x4b31, &(0x7f0000000180)) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000300)={{0x69, 0xf7, 0x2, 0x80, 0x0, 0x3}, 0x3f}) fadvise64(r5, 0x0, 0x4, 0x6) socket$inet_udplite(0x2, 0x2, 0x88) 04:05:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000036, 0x100000000000000) [ 592.106016][T22980] overlayfs: workdir and upperdir must be separate subtrees [ 592.161448][ T27] audit: type=1804 audit(1579061127.637:468): pid=22983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir938039690/syzkaller.ZZu35F/26/file0/file0" dev="loop1" ino=389 res=1 04:05:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:27 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="2400000052001f0014f9f407112c04091c0007ed10001e550a", 0x19) socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="168000005138c0f235c09e0f3f619005cb1988aebd50f0fe3c9b22701ed5d5e489f451c636b73a671cb39d32ce2799a39c8f20abb2fefcc874c67185fc995f8d8d7cd5dc0dd5ac7f2125ed621149c6fa918e65ac5694d5c87da7533e2e5c78a4a0b92814532d9c17db66d06b21b88f4ded45ae078c17ef55b66bddfaaf0d7349093e80131b7fcbe079e00836fdd5f3cd7272bff85c1bf4f12e5023bf4ee81ab7b781b3120d58003d4c76d7d107142fa0f10c2023c3cfa1effaa9a42c0baa474348e4b9bd8954145baabcf8395df63190afea8b66d07f73"], &(0x7f0000000200)=0x1e) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 04:05:27 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000037, 0x100000000000000) 04:05:28 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 592.699111][T22995] overlayfs: workdir and upperdir must be separate subtrees 04:05:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:28 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000038, 0x100000000000000) [ 592.943941][ T27] audit: type=1804 audit(1579061128.417:469): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir511968674/syzkaller.xcVREQ/605/file0" dev="sda1" ino=18006 res=1 04:05:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="2400000052001f0014f9f407112c04091c0007ed10001e550a", 0x19) socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, r2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="168000005138c0f235c09e0f3f619005cb1988aebd50f0fe3c9b22701ed5d5e489f451c636b73a671cb39d32ce2799a39c8f20abb2fefcc874c67185fc995f8d8d7cd5dc0dd5ac7f2125ed621149c6fa918e65ac5694d5c87da7533e2e5c78a4a0b92814532d9c17db66d06b21b88f4ded45ae078c17ef55b66bddfaaf0d7349093e80131b7fcbe079e00836fdd5f3cd7272bff85c1bf4f12e5023bf4ee81ab7b781b3120d58003d4c76d7d107142fa0f10c2023c3cfa1effaa9a42c0baa474348e4b9bd8954145baabcf8395df63190afea8b66d07f73"], &(0x7f0000000200)=0x1e) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0x500, 0x8080fffffffe) [ 593.140643][T23024] overlayfs: failed to resolve './file1': -2 04:05:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000039, 0x100000000000000) 04:05:28 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:28 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 04:05:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000003a, 0x100000000000000) 04:05:29 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) [ 593.709545][T23050] overlayfs: workdir and upperdir must be separate subtrees [ 593.740959][T23044] overlayfs: filesystem on './file1' not supported 04:05:29 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 04:05:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000003b, 0x100000000000000) 04:05:29 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 04:05:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:29 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x34022, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc3, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, r1, 0x8) fcntl$setstatus(r3, 0x4, 0x2000) getresuid(&(0x7f0000000300), 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0xee00, r5, r7) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x120080, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x6}, 0xfffffffffffffe7f) unshare(0x2000600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xa}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x154}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = open(0x0, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$getflags(r9, 0x0) fstat(r9, &(0x7f0000000d00)) sendmmsg$unix(r9, 0x0, 0x0, 0x0) r10 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, &(0x7f0000000200)) r12 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000076}}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)) r13 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x89a2, 0x0) r14 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f00000001c0)={0x10}) sendmsg$key(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[]}}, 0x0) r15 = gettid() perf_event_open(0x0, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) waitid(0x1, 0x0, &(0x7f0000000580), 0x8, &(0x7f00000007c0)) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r16, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e24, @empty}], 0x30) r17 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r18 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000076}, 0x20104}, 0x0, 0x0, 0xffffffffffffffff, 0x8) waitid(0x1, r18, &(0x7f0000000580), 0x2, &(0x7f00000007c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[]}}, 0x20004850) waitid(0x0, 0x0, &(0x7f0000000700), 0x2, &(0x7f0000000980)) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64], 0x8}}, 0x20004850) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r11}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r9, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r11, 0xa7, "625eef", "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"}}, 0x110) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000480)) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r19 = socket$inet(0x2, 0x0, 0x0) bind$inet(r19, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:05:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:29 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 04:05:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000003c, 0x100000000000000) [ 594.504704][T23074] overlayfs: workdir and upperdir must be separate subtrees 04:05:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:30 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 04:05:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000003d, 0x100000000000000) 04:05:30 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x34022, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc3, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, r1, 0x8) fcntl$setstatus(r3, 0x4, 0x2000) getresuid(&(0x7f0000000300), 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0xee00, r5, r7) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x120080, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x6}, 0xfffffffffffffe7f) unshare(0x2000600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xa}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x154}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = open(0x0, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$getflags(r9, 0x0) fstat(r9, &(0x7f0000000d00)) sendmmsg$unix(r9, 0x0, 0x0, 0x0) r10 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, &(0x7f0000000200)) r12 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000076}}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)) r13 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x89a2, 0x0) r14 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f00000001c0)={0x10}) sendmsg$key(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[]}}, 0x0) r15 = gettid() perf_event_open(0x0, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) waitid(0x1, 0x0, &(0x7f0000000580), 0x8, &(0x7f00000007c0)) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r16, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e24, @empty}], 0x30) r17 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r18 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000076}, 0x20104}, 0x0, 0x0, 0xffffffffffffffff, 0x8) waitid(0x1, r18, &(0x7f0000000580), 0x2, &(0x7f00000007c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[]}}, 0x20004850) waitid(0x0, 0x0, &(0x7f0000000700), 0x2, &(0x7f0000000980)) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64], 0x8}}, 0x20004850) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r11}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r9, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r11, 0xa7, "625eef", "12e0b6f86f11c246208d7cfd93e2150d375cb8ae9b3d9fbdf5dfdc9c5852ef99b790cd89a769b756794ed5d171799956be6fdf8e9de426c33093cfb71bf9da5ee69e9b3603ff42d59e18eb4a2bcc38f5f75299aa631c80b778c289449589b08fd993d9db776e92d5bc44862280166042761b3c1e022acc427a1a596a9c978ddff7311bb2e92c0aa9b9c2fa855369fbb36f0d2ee1f4cbee499320d81d6e394c4461ccbedca21500cea3d32c85f382f141f0a26d185a374a44c56620572e127d06791f77c6105f253cf965bb56b76040d98282d0cdc1ebd7fbdd6e4786174e14370022f8f62b5d7fed268b6671441eb3ba1fb1b1a22a84849159c7e19aabc351a2"}}, 0x110) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000480)) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r19 = socket$inet(0x2, 0x0, 0x0) bind$inet(r19, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:05:30 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:05:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000003e, 0x100000000000000) [ 595.194652][T23118] overlayfs: failed to resolve './file1': -2 [ 595.219597][T23092] overlayfs: workdir and upperdir must be separate subtrees 04:05:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f000004000000", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:30 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:05:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000041, 0x100000000000000) [ 595.306712][ C1] net_ratelimit: 17 callbacks suppressed [ 595.306722][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 595.318275][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 595.386364][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 595.392183][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 595.398029][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 595.403781][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 595.409596][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 595.415350][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:05:31 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x34022, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc3, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, r1, 0x8) fcntl$setstatus(r3, 0x4, 0x2000) getresuid(&(0x7f0000000300), 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0xee00, r5, r7) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x120080, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x6}, 0xfffffffffffffe7f) unshare(0x2000600) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r8, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xa}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x154}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x9a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = open(0x0, 0x0, 0x0) fcntl$setlease(r9, 0x400, 0x0) fcntl$getflags(r9, 0x0) fstat(r9, &(0x7f0000000d00)) sendmmsg$unix(r9, 0x0, 0x0, 0x0) r10 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, &(0x7f0000000200)) r12 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000076}}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)) r13 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x89a2, 0x0) r14 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r14, 0x401c5820, &(0x7f00000001c0)={0x10}) sendmsg$key(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[]}}, 0x0) r15 = gettid() perf_event_open(0x0, r15, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) waitid(0x1, 0x0, &(0x7f0000000580), 0x8, &(0x7f00000007c0)) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r16, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e24, @empty}], 0x30) r17 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r17, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r18 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000076}, 0x20104}, 0x0, 0x0, 0xffffffffffffffff, 0x8) waitid(0x1, r18, &(0x7f0000000580), 0x2, &(0x7f00000007c0)) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[]}}, 0x20004850) waitid(0x0, 0x0, &(0x7f0000000700), 0x2, &(0x7f0000000980)) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64], 0x8}}, 0x20004850) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r11}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r9, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r11, 0xa7, "625eef", "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"}}, 0x110) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000480)) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r19 = socket$inet(0x2, 0x0, 0x0) bind$inet(r19, 0x0, 0x0) openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) 04:05:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 595.535661][T23127] overlayfs: workdir and upperdir must be separate subtrees 04:05:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f000004000000", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:31 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:05:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000042, 0x100000000000000) 04:05:31 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 595.786341][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 595.792133][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:05:31 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 04:05:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000043, 0x100000000000000) 04:05:31 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 04:05:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 596.166855][T23159] overlayfs: workdir and upperdir must be separate subtrees 04:05:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000044, 0x100000000000000) [ 596.247070][T23139] overlayfs: workdir and upperdir must be separate subtrees 04:05:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f000004000000", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:31 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 04:05:31 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = getuid() syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f00000002c0)=[{&(0x7f00000019c0)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000000200)="9828c67e3036e9bfc23f0cbd05939000b0f32e5b6ff64617ff31a6fb926d82c758d764fd11b3a42d2c42135fbbfafc05df33a66a1d75ba0ea1697c7ea3c35683c2d79de01972af9d812cbede66fcaed0c51bd9196b6d24d0fa3f98057aa74cc6a4781218c8335f8e19440c1c97ba623f6a16ea17672f0431", 0x78, 0x5000000}, {&(0x7f00000029c0)="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", 0x1000, 0x1}], 0x200000, &(0x7f0000000340)={[{@codepage={'codepage', 0x3d, 'koi8-ru'}}, {@session={'session', 0x3d, 0x101}}, {@codepage={'codepage', 0x3d, 'macroman'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ð1vboxnet1vmnet0\\vmnet0$posix_acl_access\xbbmd5sum)\''}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_lt={'uid<', 0xee00}}]}) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r3, 0x208200) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) sendfile(r6, r2, &(0x7f00000000c0), 0x808100000001) 04:05:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000045, 0x100000000000000) 04:05:32 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) [ 596.664354][T23188] overlayfs: workdir and upperdir must be separate subtrees [ 596.735694][T23192] overlayfs: filesystem on './file1' not supported 04:05:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e06", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000046, 0x100000000000000) [ 596.947494][T23201] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF 04:05:32 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) [ 597.010081][ T27] audit: type=1804 audit(1579061132.487:470): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir938039690/syzkaller.ZZu35F/32/file0/file0" dev="loop1" ino=400 res=1 [ 597.015762][T23201] FAT-fs (loop1): Filesystem has been set read-only [ 597.113992][T23218] overlayfs: workdir and upperdir must be separate subtrees 04:05:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00@\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000240004000c00070008000500040000001400010062726f6164636173742d6c696e6b0000"], 0x38}}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ipvlan1\x00', @remote}) 04:05:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000047, 0x100000000000000) 04:05:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e06", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:32 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = getuid() syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f00000002c0)=[{&(0x7f00000019c0)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000000200)="9828c67e3036e9bfc23f0cbd05939000b0f32e5b6ff64617ff31a6fb926d82c758d764fd11b3a42d2c42135fbbfafc05df33a66a1d75ba0ea1697c7ea3c35683c2d79de01972af9d812cbede66fcaed0c51bd9196b6d24d0fa3f98057aa74cc6a4781218c8335f8e19440c1c97ba623f6a16ea17672f0431", 0x78, 0x5000000}, {&(0x7f00000029c0)="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", 0x1000, 0x1}], 0x200000, &(0x7f0000000340)={[{@codepage={'codepage', 0x3d, 'koi8-ru'}}, {@session={'session', 0x3d, 0x101}}, {@codepage={'codepage', 0x3d, 'macroman'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ð1vboxnet1vmnet0\\vmnet0$posix_acl_access\xbbmd5sum)\''}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_lt={'uid<', 0xee00}}]}) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r3, 0x208200) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) sendfile(r6, r2, &(0x7f00000000c0), 0x808100000001) 04:05:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000048, 0x100000000000000) 04:05:32 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = getuid() syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f00000002c0)=[{&(0x7f00000019c0)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000000200)="9828c67e3036e9bfc23f0cbd05939000b0f32e5b6ff64617ff31a6fb926d82c758d764fd11b3a42d2c42135fbbfafc05df33a66a1d75ba0ea1697c7ea3c35683c2d79de01972af9d812cbede66fcaed0c51bd9196b6d24d0fa3f98057aa74cc6a4781218c8335f8e19440c1c97ba623f6a16ea17672f0431", 0x78, 0x5000000}, {&(0x7f00000029c0)="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", 0x1000, 0x1}], 0x200000, &(0x7f0000000340)={[{@codepage={'codepage', 0x3d, 'koi8-ru'}}, {@session={'session', 0x3d, 0x101}}, {@codepage={'codepage', 0x3d, 'macroman'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ð1vboxnet1vmnet0\\vmnet0$posix_acl_access\xbbmd5sum)\''}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_lt={'uid<', 0xee00}}]}) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r3, 0x208200) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) sendfile(r6, r2, &(0x7f00000000c0), 0x808100000001) [ 597.486250][T23232] overlayfs: workdir and upperdir must be separate subtrees 04:05:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e06", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000049, 0x100000000000000) 04:05:33 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:33 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = getuid() syz_mount_image$hfs(&(0x7f0000000100)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x3, &(0x7f00000002c0)=[{&(0x7f00000019c0)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000000200)="9828c67e3036e9bfc23f0cbd05939000b0f32e5b6ff64617ff31a6fb926d82c758d764fd11b3a42d2c42135fbbfafc05df33a66a1d75ba0ea1697c7ea3c35683c2d79de01972af9d812cbede66fcaed0c51bd9196b6d24d0fa3f98057aa74cc6a4781218c8335f8e19440c1c97ba623f6a16ea17672f0431", 0x78, 0x5000000}, {&(0x7f00000029c0)="36475abb24e1245f8180ce84a26893eb773424a6dd1cf5a7e4f18e17a1855cdf4b4e5be4e4fe307c5f6d5b295e1666eb27dc187224dfe2c0744958f2bb2ee24a02bdc239704131cdbe4c662299ff66031bd30c7dbb0714fcd24ffe4b8f9a6266efb80d8bd2279ef20e83836ab58804d81f5bc9e6cce738fac1303f481318d6a6ab9b7c9d7a56d4dfb3de42775e7c8efdbd94d68cb188dcfad45bff37f3f98ad7b7dad5a49bd12f5b397fcc63bc0184643213f2ec3241581fcc843b86543a8f9039588298dceae9098829f8911fab6b44dc48e9a3e3581ea5ca14008e8c889ceb68dcbe0366da2bd88a9482c32089755640c32b3e5881c5eee56c7166aeaa02c0d0bb31b37f9363b10cdf5ece1a8096c312e0847f1f75d8058b4d274ea3f6226be7cfecf1d43483cc46050d6cedf0f37946f2728719acc518528fc86c78fe0d40fbcc88271a37b0f58add1a29934a7de03fcecaa6a36b8e42cee3ad5b0d2d64449ac3f0ca2972f9cb25b1403b7561b4504fb2ac85b6e20c4d67a8bc9b0c68ce6782a8ea938812c63087173d6bd2a1f3793b712a66cb6b7440968bfcb4f0860d4d8b0224cff4a0cc245811ee06700c791ebee7b92eea73c94ec924329f9e565cc622a34931375d5169e87bd24cb2a59ef309838e3dce212191950d7eb23b9743940a5b781f8ca31b5db28719931e8d38901ac44bb54a7eda5c7e8527f046e7e24dba3ed5dee285ad080144276b62b38935673bd8a66d8d34cd2e8b8322259d436e60f2f9f62ebdf604c46ab323fd74bb3e44013b5a15a42fc3644b80b4b8b3956b8c5ebaa5e7a8c50a256e2682cfb768232b1334b72b4c8537181056339ece3ab3279989ee87c8cb10c39c674fc4a118db79be6acde71e1addbdb4c9e2c1d141009eaa979083e65f6bbac2d21ab17254f5439b1b0f726bd23a79e00af99ab5ecf537fdaa9aa7fc38328dfcad95b3578928219880dfd6089d9f73575d7ea1d27269d7cc728c568966d7d14d8ee727a22e7b21eb8916197058129928c4e665884c498e85200993a300d46fd885dd2eca950029e0e72aa8699defb9b2bf0c8da864f06aef69e7867ad914dc4be8e4f1cb4b1460ad2a07203ba5798c3ccb7ca5f244c38ee9d3b4905697bdf7261da2cd90e21fb64a95dd4f4d62c018c5f840ab9960241a0205a234417cba57e60fa03e2e0ad52eb89c1326ac96ab7796d5d42dd17839df5cc6b34a8ffd921776df70b335914d93ac19a96360ce565deaeb0b46e70cffaa65b03e026bea61e3ca20b7d2b44b87f21032b03c49ffb2fa832f4a18beb350c2ccc2364623605c1794099d4317952bc401a44d06363e07153b58bbc2189b23ec1262a952d0d4c351b492d2e05622c21b8352286e62d6cd808ee89b50f60ab1240c7e1128e0a0e02ad6939688580287bab9ecec7408e4965f6b8d75633c1720034db0dccb748df600a8b9301906c722d7241e545a50c8a2380eea873a4d916db7aade626572a48ef55e897d2144e54d471c27a1d6b1e72dca76d8593a1024ec7b2f6a22806aaa1548325917cde3297ae966b84f200f9efb3f7fd75687207bc41403977f98d4b498ef9f013888b707df74b70233417e5c2b1e9b98040ef7a3f2408da24866596592c1110de88001255101e6bfc6e3322e4fad647ed86b6720d8e5adb61959025324212106fe0281e2de64f683ed82cc5b796d6dc7a86c7ecabdc54ef02c16d14601a47d8b1c5cdbf314e256e04ac86dad91771a9654a42157c16db313d50fcdcd919052a8990da5eb4e4c3f1bf17cfb1a1ac034d02e4c754e3984655393e8ad3a71930d0140cdec6539b9832d87e56813014d5e265a028b709fef49b074ddc0279aefc7f5122969c8b35940c0f8d2bd853eb6ba45ee066d8d74d36726bb44d68657054f530723cf114ecd635a128b1e5964c7083ee7c031d4946a524d3fc9f9237a462863c821d335dc713e0bb8ba3d4d40d5bb1ba72acc7b95c9486c938ad83c54523b3d6594f0165a3dd56af195c81a7e58b951b982e02640540688f4075fec8636bc04bd06753d4f9082c1ddc5efadcbbbf6f633d07bbbc13b2aa9ce7c805e72ef4cde7bdefecb5e69dff7548de428a4eb8f88d10369db9e7a9295e2b5b2ce915c97d26909efa84ad29f64501f0e7fc814bf9dc158c1f5ad1a0e766215dd5832aecad21346e2a1123a29b25ac926b44facebc8c4586910514b1c2c8057b92b64b6e03006b1254e8c2241721fd6b38ea829d8634608341aecbfd852e9d8729daf154a50ce4708f5482dbf539ac3286de6c392c5b6433bf0149c7e3f258619145a0c803858ed8754abb989a6a78f929c5c8931af9d16b341ec8650a1702a5fcc439f5e383ceb101ac2b1f0e94244720506ca2a957776b9dd9289a7f8ea5b40de62b0b1d11f9dac5b0fa60c55a803a65b2c050d138cde823a5153280159b17a879d6abd2f7eebd75b30793e5eeb4dd9ac7d0e8850ec7281f10beb0c275daef277e9b6f97809d329badc843a587815e3027bf5da703dd129c78ef788b9bd527333a0e91abe9f433aa05aa49dfcf82e7157c59f75723e91109f67602b56c92b102858cc3707259f4c7df2a82b66f5ed054ba27f4d35d42708e6bb3f361781eca4441ffad27171ebf482672cdbcacfe4f38c5de4e5789d43954179ad81533c48fd9900f3c4d392a3a875a997c905248d9a1a62b833db3be45d2644f46afd8468b72d8b237f43d907de669a2d4649732eb09e82fde44d3faa7985ee2ad7ac2d19cbc90b561e32b8478807abf5e3ba8308b5a4a56bef9891507140c662f34b1fa12720a15568d5355f135eac905ee0bc97ffba5c588564594b666c2478e5d1e8c3892dfeb84beee5dc89db2ee155fdbd26c870cfa308b2faeaf96a0ee20d2e60d801693838fa9876b20f795810b8657ead003eee97df4e8e1afefcdc854e6c79788ce347117df0513c5d6f0946577fe3ad53b514e855090b8f7aebf8853d0e1ba7bb96a73a51b63ec3d052b95ba486368f6c6c59de9893ca32e1a29d76a23ddfad3c253b27b6f9be7fe4a77ca360db1d63fc4d46ebbb882cfbb3fac0c6c4495ddeb9ffd042e8398c6032ea49866689d438f75f566486c54c0e21cb2672802f22e6cc60b4cc4eb394479fc1b3ae7e726f5687b18c9e1bd475f4379ca3293408419c1d0fb125a3478619a51cfa4f099bdab23d83aad30406ebe8a0ffe4fd31cf0b1c634259bb91c24f6966281e156228165bc990f8284ec3659eb91b65d6d94059fd042b208174274fa64509101b38b53206332e6f454c8677f9ed60cc80121217f8359da8abc65e3a66762e751ae339b9522409f1cf616a63d32d695a156db52dd5243d6c0d605fdc354a566f32ddb623ffa9378c82aa8e88688b5e4a411462d9aac20d56749d37d605d33b463b729b6b500402c5b09af48acf1e4b08a8f929072e8b551a7ef3e1287979a6a2ec2cb936622a5c7e1d77bc619547ee297f9de876797c165a29d6f7b0409189f8013c4f1415732a449945ebf62989196f3401baba6df088a45172ae771e69e1346d2f5896dbb77fc7e401de2be440e911644d8d0492dfc9a72a16de0dca4f3b2d2b46a4febcbae6403e08d06dc8ef5452f6c28f42e124d5e6165a070aeda6641048905d480ea2aa96101a0678c1e70c6b046657575a27d583d71b81e68a5799f12b61ceaa16b391f62e101faaa0d29ba75bebccfd427f23c23dbe4746ecaf5c4ab0132adbf646f4e074c05a49d69f59387c613e8e2568e270861b214197e1e46f03a7930fd9e8b1a436c32c52d501afc094a7eb14f8344c1343a1eb31e83f28916027ddd75be3a03d6f87ff70a264712be0fb4861f2f9d197cfd4b68031e70049ce06d477e3e6d6f5f2bda02a92e22eff9b3e1cfd513aae51fa93046adad105bdd0101e1db7ba367460d99fa92b182aa7f8b78c3750da88c2af1e8d3f5dce896f78ee22c5fbf1362d2eef63ed2f9676aead5a698bca1c6eb38ef19c180d8aa202d16931e6c992b17402ebd0fb42894a8d4551d1fa661e53d03a57a11f1ddde15b749f410995ddd1a888de0769868a3c9722fa6cea0d590d4d88f15f8910c9f1b009840127c6d3774b110123e5ff07143224f06d28e0216676559b10018fdfaf7470329444c253d727bc0d921a2ef7ad658115be8c4477915d6a94fd92c90477c9a3cd603e3901261b75ad04be5e51993eff1555b2fc984fae9dce6434baf8d4a409971e470b2a8654415e5c1e0b9032425d30e07e3af03c4a932a93a5fdcd29697236aa6d0253005eecef1dd48926daaeb7fa174da90cd4b56741011823d1bb16d4b2eeef61ad59a63a6c7f23874bf8090d60649b42124c600426a0a37eb98f77ebfd6f7efef46008f97ae8c6a126fad6048b239fd6513702e6b063ee6523bdb7bd9ee8adb1e5e538d11882865f07ef46a801a3d3e95f84fbbe67ecd2b9c2b767ddc7f928a5f4994c55595f2878651ce77399c6e34c9cb98ea6180c108c64175dc281397cca8bb876905b13d1e89b4bb3dbc889ee6b97d7af433df31d72c8e8d9c64fbfd43fd66ec06d8a3e9d6564abd2b570cba3be5cc464dabcf3f06dbb9b49512af14bf8f179c46ef8183ad313315106472544afed9a0c7062a0f3fff0ff35e9f03fba67eb94720dbf7d69a7ac8dbe105e4ba2a14e674300d8200513b1b83ad594d17330494a443d66b2a47c95fc9b111c13e0e93344297af0ecb10a8895c610e2d8478118073f1da4503286acb82ab607fac0b9ac465b9cfde4c398a7e4cbe723a9db590dc597dc865a8e0790cab66f49d538883aa795565e58e054e9776734cac79fc5208db2eb21541b682f7065c24752c34514a7283ef2716cb31a68ed50a47f8f75fd11bb7976144e9ad6f25cae947c9f9a1d5bf2ce317a31afcaf6bf531cd21fcb3d3f5f8e4aa77aa7ae5f0bd3333acd2d4d23f6b2cd144f675614b456b698917635a7d565fda2f3f882edc03abf52d26d5f67ce5f7ff9a71a8288a2839a8be8988715571a027dcfebad55804ba87c8431f948ff070a52466d1e75318b719d84a4c86addf005977f56adefb8502a47ce0b80f7e813a19a6d9d5039053230631f0b6f878588d70ef8413dcaf2f6f0611237be639a69b04a4e00b0152b616174fd13b90b324ab9d26ee972559bc5fe7052e82ec22dd9de9e7d5fc2a79e695d3836e5e1e0e202d581df2c4df284c8986609b1128091d98cc5d2d4f8a75b6231c550b7a61da0a226b91393aef16c78744456e1acfff76bdc657971588eaffb97422d8480562c0b51b7da389e109fc1f7f0bb7e5038fec67a1c613c5f153dd3cd5ce0c2c799794f11f68cb4833e874d1c9ae42e30c44eee710e2f570fdfb042733b1d5d25d6f7297351e2426536636a0d88f67f6f3758950d20ef97d4861bd00b7dbc5aa0b9b58a46a8b8aa18f02aa156155be0692c459ae3f6053af2f741e3417640bf844566e02bdb6d81cea23f4d5875130ca67cf8e828cb0ee84073b4e336aac8fdcc31705ae71af1fa8d6e268aac03164c7bfd0b0b6abfe520a2ad2b2f9771a19c3272ff938b821b125c5eb8bb7d3d22692a0b5bd2ee878c67c1140266a0e0e821b9519d3529bf4c7e8d225e635df17ffdfd01b99e87e951ba7779d88f224f9d63a744dc7dc66a6d0a3b0ffdf8d0d0ca682c16ac8b63320cc4af06446a8897b6dc0b0324201a958591acc4d7842690a1f46aefd76cc17da9a71c718e2ccdac10e13fec3dc502bfa906496c8e45be12d63bb818a529a4a500ac39248a803c2c5434becfc5a23d87c79df7e05a", 0x1000, 0x1}], 0x200000, &(0x7f0000000340)={[{@codepage={'codepage', 0x3d, 'koi8-ru'}}, {@session={'session', 0x3d, 0x101}}, {@codepage={'codepage', 0x3d, 'macroman'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ð1vboxnet1vmnet0\\vmnet0$posix_acl_access\xbbmd5sum)\''}}, {@fowner_lt={'fowner<', r0}}, {@pcr={'pcr', 0x3d, 0x15}}, {@uid_lt={'uid<', 0xee00}}]}) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r3, 0x208200) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) sendfile(r6, r2, &(0x7f00000000c0), 0x808100000001) [ 598.103997][T23255] overlayfs: workdir and upperdir must be separate subtrees 04:05:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000004a, 0x100000000000000) 04:05:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:33 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e06", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000004b, 0x100000000000000) 04:05:34 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e", 0x23}], 0x1}, 0x0) [ 598.747454][T23281] overlayfs: workdir and upperdir must be separate subtrees 04:05:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000004c, 0x100000000000000) 04:05:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:34 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:34 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e", 0x23}], 0x1}, 0x0) [ 599.062551][T23294] overlayfs: workdir and upperdir must be separate subtrees 04:05:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000004d, 0x100000000000000) [ 599.231770][T23304] overlayfs: workdir and upperdir must be separate subtrees 04:05:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r3, @ANYBLOB="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"/453], 0x84}}, 0x0) r5 = socket(0x1, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="840000002c00010900"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x84}}, 0x0) r7 = socket(0x4000000000010, 0x1000000000080002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x42, 0x0) 04:05:34 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e", 0x23}], 0x1}, 0x0) 04:05:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000004e, 0x100000000000000) [ 599.622461][T23324] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 599.768181][T23328] overlayfs: workdir and upperdir must be separate subtrees 04:05:35 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003", 0x29}], 0x1}, 0x0) [ 599.825395][T23318] overlayfs: filesystem on './file1' not supported 04:05:35 executing program 3: syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uid={'uid'}}]}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0x80184132, &(0x7f0000000040)) 04:05:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:35 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003", 0x29}], 0x1}, 0x0) 04:05:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000004f, 0x100000000000000) 04:05:35 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d00800002400ffffe629ff03000000000000fff7251daeca69fecfcf438cd7eb8f6e6c2daac2ae2e477b67eb41670cc33e7141dc4e4fae470011653537f8039ff24153b3334b1d6e7fe0188973de61513881a7abd31bac18e3cda0ffcca827087e50a8adb6e79cdef3f146a196f1e7a5237e4f050adc72689a5d5f76dd47452a6f5ce0306693dbd882d0d509179400", @ANYRES32, @ANYBLOB="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"], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4802, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x9c, r4, 0x4c2434b301265058, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '-}\'+md5sum\x00'}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_DOMAIN={0x2b, 0x1, '[]ppp0posix_acl_accessvboxnet1&cpuset)\x00'}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4084045) 04:05:35 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f000000a940)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x4}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)="9a", 0x1}], 0x1, 0x0, 0x0, 0x80fe}, 0xfc) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000300)={&(0x7f0000001900)=ANY=[@ANYBLOB="14030000", @ANYRES16=r2, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x24000000}, 0x48002) [ 600.269894][T23350] overlayfs: workdir and upperdir must be separate subtrees 04:05:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') r5 = openat(r3, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x5400, 0x0) r7 = socket(0xa, 0x1, 0x0) close(r7) r8 = socket(0x100000000011, 0x2, 0x0) bind(r8, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0}, 0x0) bind$xdp(r7, &(0x7f0000000040)={0x2c, 0x1, r9}, 0x10) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xc0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x9, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000600)={0x5, 0x10, 0x8001, 0x41}, &(0x7f0000000640)=0x101, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=0x9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xa, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0xb}, @generic={0x0, 0xd, 0xf, 0x8, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @map={0x18, 0x0, 0x1, 0x0, r3}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x101}, @map={0x18, 0x9, 0x1, 0x0, r6}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x16, &(0x7f00000004c0)=""/22, 0x41100, 0x2, [], r9, 0x7, r10, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x8, 0x2, 0x3}, 0x10, r11, r3}, 0x78) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa6866400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="000226bd7000fedbdf2501000000140003000000000000000000000000000000000108000400e000000114000200fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa14000600766c616e3000000000000000000000001400060076657468315f746f5f6873720000000008000500ac14140b1400030002000000000000007ede9fbdd9e68170"], 0x9c}, 0x1, 0x0, 0x0, 0x80000}, 0x10) r12 = accept4(r10, &(0x7f00000008c0)=@tipc=@name, &(0x7f0000000540)=0x80, 0x800) setsockopt$TIPC_CONN_TIMEOUT(r12, 0x10f, 0x82, &(0x7f0000000940)=0x4, 0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8004000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, r4, 0x111, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:var_spool_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x48045}, 0x4008904) r13 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f00000001c0)={0x10}) setsockopt$RXRPC_SECURITY_KEYRING(r13, 0x110, 0x2, &(0x7f0000000840)='eth0wlan1eth1#{em0wlan1*@\x00', 0x1a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000000ac0)={0x2, 'veth0_to_bond\x00', {0x10000}, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x200, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) 04:05:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000050, 0x100000000000000) 04:05:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:35 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003", 0x29}], 0x1}, 0x0) 04:05:36 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f000000a940)={&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x4}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000080)="9a", 0x1}], 0x1, 0x0, 0x0, 0x80fe}, 0xfc) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000300)={&(0x7f0000001900)=ANY=[@ANYBLOB="14030000", @ANYRES16=r2, @ANYBLOB="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"], 0x314}, 0x1, 0x0, 0x0, 0x24000000}, 0x48002) 04:05:36 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000051, 0x100000000000000) 04:05:36 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700", 0x2c}], 0x1}, 0x0) [ 600.847430][T23382] overlayfs: workdir and upperdir must be separate subtrees 04:05:36 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d4a000)={0xae0e8232fbf15c46}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x0, 0x0, "b1"}, 0x200000c9) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r6, 0x1ff}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 04:05:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000052, 0x100000000000000) 04:05:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000053, 0x100000000000000) 04:05:36 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700", 0x2c}], 0x1}, 0x0) 04:05:36 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = dup(0xffffffffffffffff) execveat(r2, 0x0, &(0x7f0000000140), 0x0, 0x1000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x27}}}, 0x7, 0x8}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={r3, 0x0, 0x32}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f00000002c0)="7123815c0123ff018ce006dda1c86bd7dcfb136d09ceb62c65deb54e6edba3e78e071ccb83d8c8213301cb1d7394f60abff48760ddb34e10abf8d84f42eb3b97", 0x40) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000340)=@usbdevfs_connect={0x200}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x1) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d00c0d0) r7 = socket(0x16, 0x1, 0x7f) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000003000), &(0x7f0000003040)=0xe) [ 601.402550][T23397] overlayfs: workdir and upperdir must be separate subtrees 04:05:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000054, 0x100000000000000) 04:05:37 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d4a000)={0xae0e8232fbf15c46}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x0, 0x0, "b1"}, 0x200000c9) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r6, 0x1ff}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) [ 601.546332][ C1] net_ratelimit: 26 callbacks suppressed [ 601.546342][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 601.557817][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:05:37 executing program 1: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d4a000)={0xae0e8232fbf15c46}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x0, 0x0, "b1"}, 0x200000c9) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r6, 0x1ff}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) [ 601.626362][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.632202][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 601.638043][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.643816][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 601.649634][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 601.655407][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:05:37 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700", 0x2c}], 0x1}, 0x0) [ 601.707885][T23418] overlayfs: workdir and upperdir must be separate subtrees 04:05:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000055, 0x100000000000000) 04:05:37 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1", 0x2d}], 0x1}, 0x0) [ 602.026343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 602.032157][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:05:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:37 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1", 0x2d}], 0x1}, 0x0) 04:05:37 executing program 0: r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000d4a000)={0xae0e8232fbf15c46}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x8001}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r2, &(0x7f0000000240), 0x5c3, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10}, {}, {0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000000c0)={r6, 0x0, 0x0, "b1"}, 0x200000c9) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r6, 0x1ff}, 0x8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) 04:05:37 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1", 0x2d}], 0x1}, 0x0) [ 602.424450][T23453] overlayfs: workdir and upperdir must be separate subtrees 04:05:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000056, 0x100000000000000) 04:05:38 executing program 5 (fault-call:2 fault-nth:0): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 602.877738][T23474] overlayfs: failed to resolve './file1': -2 [ 602.930034][T23476] FAULT_INJECTION: forcing a failure. [ 602.930034][T23476] name failslab, interval 1, probability 0, space 0, times 0 04:05:38 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r3, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x1100, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x3c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r6, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r9, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40840100}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r6, 0x1, 0x6}, 0x14) sendfile(r0, r1, 0x0, 0x20008) 04:05:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000057, 0x100000000000000) [ 602.995970][T23476] CPU: 0 PID: 23476 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 603.004714][T23476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.014911][T23476] Call Trace: [ 603.018286][T23476] dump_stack+0x11d/0x181 [ 603.022658][T23476] should_fail.cold+0xa/0x1a [ 603.027284][T23476] __should_failslab+0xee/0x130 [ 603.032285][T23476] should_failslab+0x9/0x14 [ 603.036822][T23476] kmem_cache_alloc_node_trace+0x3b/0x670 [ 603.042935][T23476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.049233][T23476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.056273][T23476] ? __this_cpu_preempt_check+0x45/0x140 [ 603.061961][T23476] __get_vm_area_node+0x121/0x280 [ 603.067178][T23476] __vmalloc_node_range+0xe5/0x4c0 [ 603.072363][T23476] ? netlink_sendmsg+0x345/0x8b0 [ 603.077366][T23476] ? netlink_sendmsg+0x345/0x8b0 [ 603.082471][T23476] vmalloc+0x65/0x80 [ 603.086390][T23476] ? netlink_sendmsg+0x345/0x8b0 [ 603.091336][T23476] netlink_sendmsg+0x345/0x8b0 [ 603.096117][T23476] ? netlink_unicast+0x4d0/0x4d0 [ 603.101102][T23476] sock_sendmsg+0x9f/0xc0 [ 603.105444][T23476] ____sys_sendmsg+0x49d/0x4d0 [ 603.110356][T23476] ___sys_sendmsg+0xb5/0x100 [ 603.114961][T23476] ? __fget+0xb8/0x1d0 [ 603.119081][T23476] ? __fget_light+0xaf/0x190 [ 603.123688][T23476] ? __fdget+0x2c/0x40 [ 603.127886][T23476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 603.134461][T23476] __sys_sendmsg+0xa0/0x160 [ 603.139533][T23476] __x64_sys_sendmsg+0x51/0x70 [ 603.144377][T23476] do_syscall_64+0xcc/0x3a0 [ 603.147415][T23481] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:0 [ 603.148910][T23476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 603.148934][T23476] RIP: 0033:0x45af49 [ 603.165459][T23476] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.185087][T23476] RSP: 002b:00007fc681aa9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.193649][T23476] RAX: ffffffffffffffda RBX: 00007fc681aa9c90 RCX: 000000000045af49 [ 603.201888][T23476] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 603.209871][T23476] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 603.218070][T23476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc681aaa6d4 [ 603.226055][T23476] R13: 00000000004cab27 R14: 00000000004e4278 R15: 0000000000000004 [ 603.234355][ T27] audit: type=1804 audit(1579061138.467:471): pid=23481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir938039690/syzkaller.ZZu35F/39/bus" dev="sda1" ino=16556 res=1 [ 603.281553][T23482] overlayfs: workdir and upperdir must be separate subtrees [ 603.306716][T23481] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:0 [ 603.326531][T23476] syz-executor.5: vmalloc: allocation failure: 213312 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 603.360585][T23476] CPU: 1 PID: 23476 Comm: syz-executor.5 Not tainted 5.5.0-rc1-syzkaller #0 [ 603.369295][T23476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.379377][T23476] Call Trace: [ 603.382683][T23476] dump_stack+0x11d/0x181 [ 603.387038][T23476] warn_alloc.cold+0x72/0xcf [ 603.391673][T23476] __vmalloc_node_range+0x373/0x4c0 [ 603.396893][T23476] ? netlink_sendmsg+0x345/0x8b0 [ 603.401850][T23476] vmalloc+0x65/0x80 [ 603.405770][T23476] ? netlink_sendmsg+0x345/0x8b0 [ 603.410817][T23476] netlink_sendmsg+0x345/0x8b0 [ 603.415692][T23476] ? netlink_unicast+0x4d0/0x4d0 [ 603.420640][T23476] sock_sendmsg+0x9f/0xc0 [ 603.424977][T23476] ____sys_sendmsg+0x49d/0x4d0 [ 603.429798][T23476] ___sys_sendmsg+0xb5/0x100 [ 603.434429][T23476] ? __fget+0xb8/0x1d0 [ 603.438550][T23476] ? __fget_light+0xaf/0x190 [ 603.441439][ T27] audit: type=1804 audit(1579061138.777:472): pid=23486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir938039690/syzkaller.ZZu35F/39/bus" dev="sda1" ino=16556 res=1 [ 603.443155][T23476] ? __fdget+0x2c/0x40 [ 603.443189][T23476] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 603.478067][T23476] __sys_sendmsg+0xa0/0x160 [ 603.482745][T23476] __x64_sys_sendmsg+0x51/0x70 [ 603.487527][T23476] do_syscall_64+0xcc/0x3a0 [ 603.492050][T23476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 603.498037][T23476] RIP: 0033:0x45af49 04:05:38 executing program 0: ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)}, {&(0x7f0000000900)="345c2d8464d48dbe1db4ec986cf95cb03f41a44dfbabe12014ed2e94adaefd4ac9ce7a66fa2ca9a0ec6aa8d43a4664839a6d491b7eb05c4fcc319d152e6c4a15faff7e62a8e70dc01dfd2cad7c4076640298660cac28e6120ee3be5d6a4bc89a84bf1f4fe1648ebb65117c71a567950eebb384cdad5a0c659f1a73c36b9cd4ec918859b1a1c3f58b8d72591bf8ca7b353101d8c0f9fb5dfde7a88c3da8f2640a035d27600aefcac52dbddc6e9ec705e6f4ea30fb154104518c7064872fbfcc5eeafb78e09c980cdafd6d6233df114d5c8d9004fb51", 0xd5}], 0x2, 0xd) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x10}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x0, 0x0, "b1"}, 0x200000c9) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000005c0)=@assoc_id=r4, &(0x7f00000006c0)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000700)={r5, 0x6, 0x6}, &(0x7f0000000780)=0x8) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r6 = getpgrp(0x0) setpriority(0x0, r6, 0xffff) r7 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="58c3f70666f44b5b5f9e52be84657cebabeecd4e09633d13ff919a4f2864942bde4b1008c6a09b19802107e7b48624fa0e0424f2b0ea", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000000011a0000000000000000000000000000000000000006e7fd2c13f61f8d6ac5"], 0x3}}, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000001c0)={0x10}) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f00000001c0)=0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) migrate_pages(r9, 0x0, &(0x7f0000000340)=0xe3, &(0x7f0000000380)=0x4) fstat(0xffffffffffffffff, &(0x7f00000003c0)) r10 = geteuid() r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f00000001c0)={0x10}) r12 = openat(r11, &(0x7f0000000080)='./file0\x00', 0x80842, 0x8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r12, 0x40045542, &(0x7f0000000600)=0x80) r13 = getpid() sched_setscheduler(r13, 0x5, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x0, 0x2, 0xb1, 0x2, r13}) r14 = getgid() fchown(0xffffffffffffffff, r10, r14) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000000480)=""/214, &(0x7f0000000180)=0xd6) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000a80)=[&(0x7f0000000a00)='/\x00', &(0x7f0000000a40)='trusted\xb2keyring%&&\x00'], &(0x7f0000000280)) 04:05:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000058, 0x100000000000000) 04:05:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 603.502034][T23476] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.521651][T23476] RSP: 002b:00007fc681aa9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.530092][T23476] RAX: ffffffffffffffda RBX: 00007fc681aa9c90 RCX: 000000000045af49 [ 603.538079][T23476] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 603.546165][T23476] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:05:39 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451363e89bb40b"], 0x23) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e80c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x40]}, 0x45c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0x5101, 0x0) r3 = accept4$netrom(r2, &(0x7f0000000680)={{0x3, @null}, [@default, @null, @null, @remote, @rose, @bcast, @rose, @netrom]}, &(0x7f0000000240)=0x48, 0x80800) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x800448d2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x800448d2, &(0x7f0000000340)={'veth0\x00'}) fchdir(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000580)="55bc239abf0b7f5e649c73460aa94d63d4e8dec068db8f92ea23c2ef25a6376d38b7c100f357e3c3ad4f7d127c73950639a796d2631d05fb757eb8dd080d326dd19c03b60f893baff9515a9bf41e145476c6428c3d04492d432a6c76d1d4ff0d8fb8d63a7451d6373be75442e561f467159fcb6dcfe4985cf4d0a5a237fbfb6cabbc331a841bbc60b51aadf06d954eaec7c34421cdedaca98c3689603433b1643f97a1a75c63b0010f3175ef8557b293f84f35f06eff0bc46220c9f165fdf5a7b7a79f407535f93ba076f11769f8be17823a77149a6df84905d1cbe8032dac3cf64256765fa621a086b3287b", 0xec, 0x200c4030, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d"], 0x1, 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@alg, &(0x7f0000000140)=0x80, 0x80000) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r7, r7, &(0x7f0000000180)=0x74000000, 0x5) getpeername$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000018c0)=0x14) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r8, r8, &(0x7f0000000180)=0x74000000, 0x5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001980)={'nr0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002100)={{{@in=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002200)=0xe8) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'\x00', r10}) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r11, r11, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in6=@local}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000002c00)=0xe8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 603.552809][T23493] sctp: [Deprecated]: syz-executor.0 (pid 23493) Use of int in maxseg socket option. [ 603.552809][T23493] Use struct sctp_assoc_value instead [ 603.554236][T23476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc681aaa6d4 [ 603.554246][T23476] R13: 00000000004cab27 R14: 00000000004e4278 R15: 0000000000000004 [ 603.580133][ T27] audit: type=1804 audit(1579061139.007:473): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir449464071/syzkaller.49NQd6/454/file0" dev="sda1" ino=18090 res=1 04:05:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000059, 0x100000000000000) 04:05:39 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) close(r0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_open_pts(r3, 0x40) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TCSETXW(r5, 0x5435, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r6, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r9, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40840100}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r6, 0x1, 0x6}, 0x14) sendfile(r0, r1, 0x0, 0x20008) 04:05:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR, @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 603.846082][T23503] overlayfs: workdir and upperdir must be separate subtrees [ 603.996354][T23476] Mem-Info: [ 603.999759][T23476] active_anon:237008 inactive_anon:13157 isolated_anon:0 [ 603.999759][T23476] active_file:12585 inactive_file:33174 isolated_file:0 [ 603.999759][T23476] unevictable:2048 dirty:289 writeback:0 unstable:0 [ 603.999759][T23476] slab_reclaimable:5700 slab_unreclaimable:17972 [ 603.999759][T23476] mapped:60403 shmem:317 pagetables:2137 bounce:0 [ 603.999759][T23476] free:1487530 free_pcp:866 free_cma:0 [ 604.126819][ T27] audit: type=1804 audit(1579061139.607:475): pid=23521 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir938039690/syzkaller.ZZu35F/40/bus" dev="sda1" ino=16576 res=1 [ 604.137885][T23521] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:0 [ 604.236650][T23476] Node 0 active_anon:952316kB inactive_anon:52628kB active_file:50204kB inactive_file:132696kB unevictable:9092kB isolated(anon):0kB isolated(file):0kB mapped:242512kB dirty:1156kB writeback:0kB shmem:2168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 288768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 604.317699][T23525] overlayfs: workdir and upperdir must be separate subtrees [ 604.347272][T23476] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 604.408040][T23476] Node 0 DMA free:15908kB min:188kB low:232kB high:276kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.448792][T23476] lowmem_reserve[]: 0 2908 3615 3615 [ 604.492015][T23476] Node 0 DMA32 free:2111204kB min:35360kB low:44200kB high:53040kB reserved_highatomic:0KB active_anon:454840kB inactive_anon:43060kB active_file:20368kB inactive_file:91436kB unevictable:10428kB writepending:904kB present:3129332kB managed:2980540kB mlocked:10432kB kernel_stack:1024kB pagetables:5096kB bounce:0kB free_pcp:1984kB local_pcp:1216kB free_cma:0kB [ 604.596572][T23476] lowmem_reserve[]: 0 0 707 707 [ 604.601614][T23476] Node 0 Normal free:10556kB min:8600kB low:10748kB high:12896kB reserved_highatomic:0KB active_anon:495256kB inactive_anon:9568kB active_file:29836kB inactive_file:41288kB unevictable:0kB writepending:200kB present:786432kB managed:724520kB mlocked:0kB kernel_stack:3224kB pagetables:3208kB bounce:0kB free_pcp:1560kB local_pcp:636kB free_cma:0kB [ 604.637323][T23476] lowmem_reserve[]: 0 0 0 0 [ 604.641959][T23476] Node 1 Normal free:3808112kB min:45956kB low:57444kB high:68932kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3932160kB managed:3870256kB mlocked:0kB kernel_stack:8kB pagetables:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 604.677338][T23476] lowmem_reserve[]: 0 0 0 0 [ 604.681986][T23476] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 604.703425][T23476] Node 0 DMA32: 37*4kB (UME) 9*8kB (UME) 2*16kB (U) 4*32kB (UE) 198*64kB (ME) 142*128kB (UM) 11*256kB (UME) 6*512kB (M) 6*1024kB (UME) 1*2048kB (U) 504*4096kB (M) = 2109692kB [ 604.724156][T23476] Node 0 Normal: 1*4kB (E) 1*8kB (E) 5*16kB (ME) 21*32kB (ME) 73*64kB (ME) 32*128kB (ME) 4*256kB (ME) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 10556kB [ 604.742477][T23476] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UE) 2*32kB (ME) 0*64kB 4*128kB (UME) 3*256kB (UME) 1*512kB (E) 3*1024kB (UME) 3*2048kB (UME) 927*4096kB (M) = 3808112kB [ 604.779837][T23476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.790264][T23476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.819279][T23476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.831158][T23476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.844582][T23476] 47392 total pagecache pages [ 604.849480][T23476] 0 pages in swap cache [ 604.853842][T23476] Swap cache stats: add 0, delete 0, find 0/0 04:05:40 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005a, 0x100000000000000) 04:05:40 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451363e89bb40b"], 0x23) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e80c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x40]}, 0x45c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0x5101, 0x0) r3 = accept4$netrom(r2, &(0x7f0000000680)={{0x3, @null}, [@default, @null, @null, @remote, @rose, @bcast, @rose, @netrom]}, &(0x7f0000000240)=0x48, 0x80800) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x800448d2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x800448d2, &(0x7f0000000340)={'veth0\x00'}) fchdir(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000580)="55bc239abf0b7f5e649c73460aa94d63d4e8dec068db8f92ea23c2ef25a6376d38b7c100f357e3c3ad4f7d127c73950639a796d2631d05fb757eb8dd080d326dd19c03b60f893baff9515a9bf41e145476c6428c3d04492d432a6c76d1d4ff0d8fb8d63a7451d6373be75442e561f467159fcb6dcfe4985cf4d0a5a237fbfb6cabbc331a841bbc60b51aadf06d954eaec7c34421cdedaca98c3689603433b1643f97a1a75c63b0010f3175ef8557b293f84f35f06eff0bc46220c9f165fdf5a7b7a79f407535f93ba076f11769f8be17823a77149a6df84905d1cbe8032dac3cf64256765fa621a086b3287b", 0xec, 0x200c4030, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d"], 0x1, 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@alg, &(0x7f0000000140)=0x80, 0x80000) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r7, r7, &(0x7f0000000180)=0x74000000, 0x5) getpeername$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000018c0)=0x14) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r8, r8, &(0x7f0000000180)=0x74000000, 0x5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001980)={'nr0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002100)={{{@in=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002200)=0xe8) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'\x00', r10}) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r11, r11, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in6=@local}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000002c00)=0xe8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) 04:05:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR, @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:40 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR, @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 604.896844][T23476] Free swap = 0kB [ 604.900685][T23476] Total swap = 0kB [ 604.904455][T23476] 1965979 pages RAM [ 604.916544][T23476] 0 pages HighMem/MovableOnly [ 604.921328][T23476] 68173 pages reserved [ 604.925512][T23476] 0 pages cma reserved 04:05:40 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0a00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 605.152784][T23552] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005b, 0x100000000000000) [ 605.212204][T23541] overlayfs: workdir and upperdir must be separate subtrees 04:05:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR, @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:41 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="0f00000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 605.589194][T23566] overlayfs: failed to resolve './file1': -2 04:05:41 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) close(r0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_open_pts(r3, 0x40) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TCSETXW(r5, 0x5435, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005c, 0x100000000000000) 04:05:41 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:41 executing program 3: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) close(r0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_open_pts(r3, 0x40) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TCSETXW(r5, 0x5435, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005d, 0x100000000000000) 04:05:41 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2500000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 606.222924][T23610] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. [ 606.290689][T23613] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005e, 0x100000000000000) 04:05:42 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="3500000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 606.520125][T23617] overlayfs: failed to resolve './file1': -2 04:05:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000005f, 0x100000000000000) [ 606.730197][T23624] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'. [ 606.785088][T23624] net_ratelimit: 31 callbacks suppressed [ 606.785096][T23624] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 606.900763][T23628] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'. [ 606.916979][T23628] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 607.246047][T23637] overlayfs: failed to resolve './file1': -2 [ 607.786653][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 607.792902][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 607.866682][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 607.872840][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 607.879133][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 607.885291][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 607.891679][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 607.897608][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:05:43 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) close(r0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_open_pts(r3, 0x40) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TCSETXW(r5, 0x5435, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000060, 0x100000000000000) 04:05:43 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="6700000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 608.358286][T23647] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.5'. [ 608.382810][T23648] netlink: 63 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:44 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) close(r0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_open_pts(r3, 0x40) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TCSETXW(r5, 0x5435, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000061, 0x100000000000000) [ 608.639522][T23662] overlayfs: failed to resolve './file1': -2 [ 608.647666][T23661] netlink: 395 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:44 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:44 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:44 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000062, 0x100000000000000) [ 608.849918][T23676] netlink: 212920 bytes leftover after parsing attributes in process `syz-executor.5'. [ 608.866237][T23678] netlink: 212920 bytes leftover after parsing attributes in process `syz-executor.5'. [ 609.306199][T23687] overlayfs: workdir and upperdir must be separate subtrees 04:05:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:45 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:45 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000000a000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000063, 0x100000000000000) [ 610.000736][T23704] overlayfs: workdir and upperdir must be separate subtrees 04:05:45 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) close(r0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_open_pts(r3, 0x40) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TCSETXW(r5, 0x5435, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:45 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:45 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000000f000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000064, 0x100000000000000) 04:05:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:45 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000014000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:45 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000065, 0x100000000000000) [ 610.537674][T23720] overlayfs: workdir and upperdir must be separate subtrees 04:05:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:46 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 610.738078][T23713] overlayfs: workdir and upperdir must be separate subtrees 04:05:46 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000066, 0x100000000000000) [ 610.820218][T23744] netlink: 518 bytes leftover after parsing attributes in process `syz-executor.5'. [ 610.889197][T23746] netlink: 518 bytes leftover after parsing attributes in process `syz-executor.5'. [ 611.170267][T23755] overlayfs: workdir and upperdir must be separate subtrees 04:05:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000066, 0x100000000000000) 04:05:47 executing program 3: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000065, 0x100000000000000) 04:05:47 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000067, 0x100000000000000) 04:05:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc704337"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000068, 0x100000000000000) [ 611.907793][T23769] netlink: 774 bytes leftover after parsing attributes in process `syz-executor.5'. [ 611.946354][ C1] net_ratelimit: 26 callbacks suppressed [ 611.946363][ C1] protocol 88fb is buggy, dev hsr_slave_0 04:05:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR, @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 611.957983][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 611.996500][T23769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 612.026381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 612.032209][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 612.038035][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 612.043787][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 612.045593][T23770] overlayfs: workdir and upperdir must be separate subtrees [ 612.049661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 612.049689][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:05:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 612.080506][T23777] netlink: 774 bytes leftover after parsing attributes in process `syz-executor.5'. [ 612.102814][T23777] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:05:47 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e04000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000069, 0x100000000000000) 04:05:47 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR, @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc704337"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 612.314093][T23791] netlink: 1030 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:47 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 612.361159][T23794] overlayfs: failed to resolve './file1': -2 [ 612.385774][T23796] netlink: 1030 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:48 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006a, 0x100000000000000) [ 612.588583][T23803] overlayfs: workdir and upperdir must be separate subtrees 04:05:48 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e05000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc704337"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc704337"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:48 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 612.756836][T23806] overlayfs: filesystem on './file1' not supported 04:05:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006b, 0x100000000000000) [ 612.878702][T23826] netlink: 1286 bytes leftover after parsing attributes in process `syz-executor.5'. [ 612.938483][T23832] netlink: 1286 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:48 executing program 3: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:48 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc704337"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 613.045285][T23833] overlayfs: workdir and upperdir must be separate subtrees [ 613.060625][T23830] overlayfs: workdir and upperdir must be separate subtrees 04:05:48 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e06000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006c, 0x100000000000000) 04:05:48 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR, @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:48 executing program 3: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 613.242396][T23852] netlink: 1542 bytes leftover after parsing attributes in process `syz-executor.5'. [ 613.270739][T23853] netlink: 1542 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:48 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e07000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:49 executing program 3: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:49 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0a000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006d, 0x100000000000000) [ 613.599587][T23867] overlayfs: workdir and upperdir must be separate subtrees [ 613.637897][T23877] overlayfs: failed to resolve './file1': -2 [ 613.667936][T23849] overlayfs: filesystem on './file1' not supported 04:05:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 04:05:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:49 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc704337"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006e, 0x100000000000000) 04:05:49 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0e000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc704337"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 04:05:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 04:05:49 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0f000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 614.103116][T23903] overlayfs: workdir and upperdir must be separate subtrees 04:05:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000006f, 0x100000000000000) 04:05:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 614.281490][T23893] overlayfs: workdir and upperdir must be separate subtrees 04:05:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 04:05:49 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000070, 0x100000000000000) [ 614.412046][T23907] overlayfs: filesystem on './file1' not supported 04:05:50 executing program 1: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451363e89bb40b"], 0x23) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e80c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x40]}, 0x45c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0x5101, 0x0) r3 = accept4$netrom(r2, &(0x7f0000000680)={{0x3, @null}, [@default, @null, @null, @remote, @rose, @bcast, @rose, @netrom]}, &(0x7f0000000240)=0x48, 0x80800) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x800448d2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x800448d2, &(0x7f0000000340)={'veth0\x00'}) fchdir(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000580)="55bc239abf0b7f5e649c73460aa94d63d4e8dec068db8f92ea23c2ef25a6376d38b7c100f357e3c3ad4f7d127c73950639a796d2631d05fb757eb8dd080d326dd19c03b60f893baff9515a9bf41e145476c6428c3d04492d432a6c76d1d4ff0d8fb8d63a7451d6373be75442e561f467159fcb6dcfe4985cf4d0a5a237fbfb6cabbc331a841bbc60b51aadf06d954eaec7c34421cdedaca98c3689603433b1643f97a1a75c63b0010f3175ef8557b293f84f35f06eff0bc46220c9f165fdf5a7b7a79f407535f93ba076f11769f8be17823a77149a6df84905d1cbe8032dac3cf64256765fa621a086b3287b", 0xec, 0x200c4030, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d"], 0x1, 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@alg, &(0x7f0000000140)=0x80, 0x80000) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r7, r7, &(0x7f0000000180)=0x74000000, 0x5) getpeername$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000018c0)=0x14) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r8, r8, &(0x7f0000000180)=0x74000000, 0x5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001980)={'nr0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002100)={{{@in=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002200)=0xe8) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'\x00', r10}) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r11, r11, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in6=@local}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000002c00)=0xe8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) 04:05:50 executing program 0: r0 = perf_event_open(&(0x7f00000001c0)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) epoll_create1(0x0) r2 = creat(0x0, 0x0) fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) creat(0x0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000080)) close(r0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_open_pts(r3, 0x40) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$TCSETXW(r5, 0x5435, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = memfd_create(&(0x7f0000000500)='/dev\x8aT\xc0_\xb7#\x10\x160xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000071, 0x100000000000000) 04:05:50 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4c000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 614.633928][T23934] overlayfs: workdir and upperdir must be separate subtrees 04:05:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 04:05:50 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e50000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000072, 0x100000000000000) 04:05:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:05:50 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e60000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000073, 0x100000000000000) [ 615.302892][T23970] overlayfs: workdir and upperdir must be separate subtrees 04:05:50 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 615.800243][T23993] overlayfs: filesystem on './file1' not supported 04:05:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:05:51 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e68000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000074, 0x100000000000000) 04:05:51 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 04:05:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 616.328463][T24012] __nla_validate_parse: 16 callbacks suppressed [ 616.328478][T24012] netlink: 26630 bytes leftover after parsing attributes in process `syz-executor.5'. [ 616.413381][T24013] overlayfs: workdir and upperdir must be separate subtrees 04:05:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000075, 0x100000000000000) 04:05:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) [ 616.475219][T24019] overlayfs: workdir and upperdir must be separate subtrees [ 616.503223][T24029] netlink: 26630 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:52 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01e23ddf45f1f8eddb8ee3440fa2f84c99f10cc6297fa1b9b3853c78451363e89bb40b"], 0x23) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e80c42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x40]}, 0x45c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0x5101, 0x0) r3 = accept4$netrom(r2, &(0x7f0000000680)={{0x3, @null}, [@default, @null, @null, @remote, @rose, @bcast, @rose, @netrom]}, &(0x7f0000000240)=0x48, 0x80800) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x800448d2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x800448d2, &(0x7f0000000340)={'veth0\x00'}) fchdir(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000580)="55bc239abf0b7f5e649c73460aa94d63d4e8dec068db8f92ea23c2ef25a6376d38b7c100f357e3c3ad4f7d127c73950639a796d2631d05fb757eb8dd080d326dd19c03b60f893baff9515a9bf41e145476c6428c3d04492d432a6c76d1d4ff0d8fb8d63a7451d6373be75442e561f467159fcb6dcfe4985cf4d0a5a237fbfb6cabbc331a841bbc60b51aadf06d954eaec7c34421cdedaca98c3689603433b1643f97a1a75c63b0010f3175ef8557b293f84f35f06eff0bc46220c9f165fdf5a7b7a79f407535f93ba076f11769f8be17823a77149a6df84905d1cbe8032dac3cf64256765fa621a086b3287b", 0xec, 0x200c4030, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d"], 0x1, 0x1) prctl$PR_CAPBSET_DROP(0x18, 0x9) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) r6 = accept4(0xffffffffffffffff, &(0x7f00000003c0)=@alg, &(0x7f0000000140)=0x80, 0x80000) perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5}, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000004c0)='veno\x00', 0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r7, r7, &(0x7f0000000180)=0x74000000, 0x5) getpeername$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000018c0)=0x14) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r8, r8, &(0x7f0000000180)=0x74000000, 0x5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001980)={'nr0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002100)={{{@in=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000002200)=0xe8) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000280)={'\x00', r10}) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r11, r11, &(0x7f0000000180)=0x74000000, 0x5) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000740)={{{@in=@remote, @in6=@local}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002b00)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@empty}}, &(0x7f0000002c00)=0xe8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000200)) ptrace$setopts(0x4206, r0, 0x0, 0x0) 04:05:52 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e6c000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 616.603220][T24007] overlayfs: workdir and upperdir must be separate subtrees 04:05:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 04:05:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000076, 0x100000000000000) 04:05:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 04:05:52 executing program 1: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x7fffdf00f000, 0xa, 0x10, r3, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000300)={0x100000011, @multicast2, 0x1100, 0x0, 'lblc\x00'}, 0x2c) r5 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x3c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={r6, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) syz_genetlink_get_family_id$team(&(0x7f0000000840)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000480)={'team0\x00', r7}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r9, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40840100}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000074000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r10 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r10, 0x4, 0x42000) bind$packet(r0, &(0x7f0000000000)={0x11, 0xc, r6, 0x1, 0x6}, 0x14) sendfile(r0, r1, 0x0, 0x20008) [ 616.809747][T24047] netlink: 27654 bytes leftover after parsing attributes in process `syz-executor.5'. [ 616.848921][T24051] netlink: 27654 bytes leftover after parsing attributes in process `syz-executor.5'. [ 616.905578][T24041] overlayfs: workdir and upperdir must be separate subtrees 04:05:52 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e74000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 04:05:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000077, 0x100000000000000) [ 617.153881][T24067] netlink: 29702 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.205399][ T27] audit: type=1804 audit(1579061152.677:476): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir938039690/syzkaller.ZZu35F/52/bus" dev="sda1" ino=16670 res=1 [ 617.215497][T24065] IPVS: set_ctl: invalid protocol: 60 172.30.0.2:0 [ 617.251279][T24067] net_ratelimit: 55 callbacks suppressed [ 617.251286][T24067] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.291658][T24077] netlink: 29702 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:52 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e7a000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) [ 617.317399][T24077] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.352730][T24076] overlayfs: workdir and upperdir must be separate subtrees [ 617.442371][T24084] netlink: 31238 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.481961][T24084] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.505646][T24088] netlink: 31238 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.537092][T24088] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:05:53 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000078, 0x100000000000000) 04:05:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:53 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00030032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 617.796608][T24103] netlink: 196614 bytes leftover after parsing attributes in process `syz-executor.5'. [ 617.829611][T24095] overlayfs: workdir and upperdir must be separate subtrees [ 617.838277][T24103] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:05:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000079, 0x100000000000000) 04:05:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:53 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00050032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 618.033364][T24106] overlayfs: workdir and upperdir must be separate subtrees 04:05:53 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00060032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 618.186334][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 618.192203][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 618.193338][T24115] overlayfs: filesystem on './file1' not supported [ 618.276333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 618.282412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 618.288228][ C0] protocol 88fb is buggy, dev hsr_slave_0 04:05:53 executing program 1: prlimit64(0x0, 0x6, &(0x7f0000000180), 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 04:05:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000007a, 0x100000000000000) 04:05:53 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r1, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r3, 0x0, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', r1, r3, 0x1000) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)={0x3, 0x0, [{0x5b3d72c4aff7e968, 0x4ea, 0x5, 0x8, 0x84a4}, {0x80000008, 0x10000, 0x0, 0x400, 0x400}, {0x40000000, 0x7, 0xfffffffe, 0x0, 0x1}]}) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = getpgrp(0x0) setpriority(0x0, r5, 0xffff) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0xffffffffffffffff) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) r7 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r7, 0x400000001ffffffd) r8 = openat$cgroup_ro(r4, &(0x7f00000004c0)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x6, @mcast1, 0x2}, @in6={0xa, 0x4e20, 0x3f, @remote, 0xfd}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x2, @mcast1, 0xfffffc01}], 0x74) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR]^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9']) [ 618.397675][T24127] overlayfs: workdir and upperdir must be separate subtrees 04:05:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:54 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00070032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:54 executing program 0: getpid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f000001d000)={0x3, 0xfffffd92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x24909, 0x0, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4}, 0xc) flistxattr(0xffffffffffffffff, &(0x7f00000004c0)=""/102348, 0x18fcc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x3cb55000) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) write$FUSE_INTERRUPT(r3, &(0x7f0000000180)={0x10, 0x0, 0x2}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000080)={0xa8001, 0x0, [0x5, 0x40, 0x101, 0x0, 0x7ff, 0x5, 0x0, 0x5]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000001c0)={0x10}) r10 = dup3(r1, r9, 0x0) dup2(r10, r8) 04:05:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002400a000200053582c137153e", 0x23}], 0x1}, 0x0) 04:05:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000007b, 0x100000000000000) 04:05:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x4000) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4da72aca94d883e2ff29e1f446b573d4d53cf93079a48da1a1c5567b7ada164cdaee35e2625a386cddb707f54ffefc19be68b6331da2aeb208e521a3dde5939ab25a932fae347233a6d5b7e4c2965ef5590b75b2a4e57b36ef708f7d12a835823727054b250cb14bf6575a000000000000007e7525e55793e7dc4009c61b487845b1de", 0xca, 0x10000}], 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYPTR], 0x3}, 0x1, 0x0, 0x0, 0x44040001}, 0x200c0080) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000600)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000680)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), r5}}, 0x18) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000002c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000440)=0xc) r8 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x200, 0x80040) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000001c0)={0x10}) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000500)={r9, r10, 0x401}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f00000000c0)={r13, 0x0, 0x0, "b1"}, 0x200000c9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={r13, 0x4}, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000003c0)={0x4a, ""/74}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) 04:05:54 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e85080032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 618.940416][T24175] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 222 transid 18438444790640683687 /dev/loop1 scanned by syz-executor.1 (24175) [ 618.972882][T24175] BTRFS error (device loop1): unsupported checksum algorithm: 18459 04:05:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000007c, 0x100000000000000) 04:05:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 619.018172][T24169] overlayfs: workdir and upperdir must be separate subtrees [ 619.044161][T24175] BTRFS error (device loop1): open_ctree failed 04:05:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c", 0xd}], 0x1}, 0x0) 04:05:54 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000a0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 619.243429][T24175] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 222 transid 18438444790640683687 /dev/loop1 scanned by syz-executor.1 (24175) 04:05:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c", 0xd}], 0x1}, 0x0) [ 619.298250][T24175] BTRFS error (device loop1): unsupported checksum algorithm: 18459 [ 619.323141][T24201] overlayfs: failed to resolve './file1': -2 04:05:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000007d, 0x100000000000000) [ 619.358239][T24187] cgroup: fork rejected by pids controller in /syz4 [ 619.359388][T24175] BTRFS error (device loop1): open_ctree failed 04:05:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:55 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000e0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000007e, 0x100000000000000) 04:05:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c", 0xd}], 0x1}, 0x0) 04:05:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x4000) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="8da4363ac0ed0200000000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4da72aca94d883e2ff29e1f446b573d4d53cf93079a48da1a1c5567b7ada164cdaee35e2625a386cddb707f54ffefc19be68b6331da2aeb208e521a3dde5939ab25a932fae347233a6d5b7e4c2965ef5590b75b2a4e57b36ef708f7d12a835823727054b250cb14bf6575a000000000000007e7525e55793e7dc4009c61b487845b1de", 0xca, 0x10000}], 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r1, @ANYPTR], 0x3}, 0x1, 0x0, 0x0, 0x44040001}, 0x200c0080) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000600)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000680)={0xb, 0x10, 0xfa00, {&(0x7f0000000540), r5}}, 0x18) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000002c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f0000000440)=0xc) r8 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x200, 0x80040) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000001c0)={0x10}) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r8, &(0x7f0000000500)={r9, r10, 0x401}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f00000000c0)={r13, 0x0, 0x0, "b1"}, 0x200000c9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={r13, 0x4}, 0x8) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000003c0)={0x4a, ""/74}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000140)='btrfs\x00', &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c) 04:05:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc", 0x13}], 0x1}, 0x0) [ 619.900777][T24235] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 222 transid 18438444790640683687 /dev/loop1 scanned by syz-executor.1 (24235) 04:05:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc", 0x13}], 0x1}, 0x0) 04:05:55 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000f0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 619.983720][T24233] overlayfs: workdir and upperdir must be separate subtrees 04:05:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000082, 0x100000000000000) [ 620.059520][T24235] BTRFS error (device loop1): unsupported checksum algorithm: 18459 04:05:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc", 0x13}], 0x1}, 0x0) 04:05:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 620.166979][T24235] BTRFS error (device loop1): open_ctree failed [ 620.352318][T24239] overlayfs: workdir and upperdir must be separate subtrees [ 620.429197][T24264] overlayfs: workdir and upperdir must be separate subtrees 04:05:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc601000", 0x16}], 0x1}, 0x0) 04:05:56 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00200032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000083, 0x100000000000000) 04:05:56 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:56 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000084, 0x100000000000000) 04:05:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc601000", 0x16}], 0x1}, 0x0) 04:05:56 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00400032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 620.898903][T24285] overlayfs: workdir and upperdir must be separate subtrees 04:05:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc601000", 0x16}], 0x1}, 0x0) [ 620.944157][T24281] overlayfs: filesystem on './file1' not supported 04:05:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000085, 0x100000000000000) 04:05:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:56 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00480032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 621.063350][T24299] overlayfs: workdir and upperdir must be separate subtrees 04:05:56 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x8, 0x72f1}]}, 0xc, 0x0) r2 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x22102, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x1) fcntl$setstatus(r2, 0x4, 0x2000) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) write$9p(r4, &(0x7f0000001400)="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", 0x600) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000000)='/vboxnet1&selinux\xb7wlan1vmnet0\x95\x00') clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)={0x40, 0x5, 0x4, 0x0, 0x7, {r5, r6/1000+30000}, {0xf3cc77be62e2e21a, 0x2, 0x4, 0x7f, 0x0, 0x7, "d3b538eb"}, 0x7fff, 0x1, @offset=0xfffffffe, 0x3f, 0x0, 0xffffffffffffffff}) accept$alg(r7, 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)="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", 0x200) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SCSI_IOCTL_START_UNIT(r9, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) 04:05:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000086, 0x100000000000000) 04:05:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:56 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e004c0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:56 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x3, 0x2a2400) syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000001c0)={0x10}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10}) r3 = socket$inet6(0xa, 0x6, 0x7f) r4 = dup2(r1, r3) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f00000000c0)={0x6, &(0x7f0000000180)="656b1eb3d52bf5d31c51e2bc466825bc4dbd2c0f8a4e6025de32af1ff9d8366cec634a72acdc9a372ec239218f8bd34d7d1100bdf337f10c275db42e22c5564478533cfba7f82a7daf48e4bdebe3fe270140e647d6f4e68c13c2475bca580a14afb4fef61e55198d596216abb55b94d8d8c056696c3be0432d1765005a43c0d97a4427b4b2b33f02b220ff655a4b2b11f70078b9"}) fchmodat(r5, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000100)=""/116, 0x74) lseek(r0, 0x3, 0x1) getdents64(r0, &(0x7f0000000400)=""/255, 0xff) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0xee01, r8, 0x0) fchownat(r6, &(0x7f0000000300)='./file0\x00', r8, 0xee00, 0x1000) 04:05:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) [ 621.481433][ T27] audit: type=1804 audit(1579061156.957:477): pid=24331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir938039690/syzkaller.ZZu35F/58/file0" dev="sda1" ino=16748 res=1 [ 621.521227][T24331] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:05:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000087, 0x100000000000000) [ 621.549432][T24320] overlayfs: workdir and upperdir must be separate subtrees 04:05:57 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00500032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 621.646416][T24331] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 04:05:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a3915"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc60100002", 0x17}], 0x1}, 0x0) 04:05:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000088, 0x100000000000000) 04:05:57 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00600032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:57 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080)=@ccm_128={{}, "b9821c79e7e112f5", "aa183fd7d073f33982f44c76fe0b0948", "149adfd2", "da09dc1392d90ff9"}, 0x28) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x509142, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x0, 0x20, 0x0, 0x2, 0x0, 0x69f, 0x0, 0x4, 0x20, 0xfffffffffffff264, 0xe87, 0x3ff, 0x8, 0xffff, 0xff, 0x8, 0x3, 0x2, 0x9, 0x1, 0xffffffffffffff71, 0x9, 0x641, 0x3f, 0xa, 0xffffffffffff6276, 0x0, 0xfffffffffffffff7, 0x0, 0xb89, 0x0, 0x0, 0x9, 0x0, 0x0, 0x450, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x7}, 0x2010, 0xb8, 0x7, 0xf, 0xffff, 0x1f}, r2, 0x9, r0, 0x2) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000480)) r3 = syz_open_procfs(0x0, 0x0) setxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) fstatfs(r4, &(0x7f0000000080)=""/179) perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, @perf_config_ext={0x4, 0x4000000000}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r5, 0x6) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=0x120) time(0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80000162) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000640)=""/233, 0xe9) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) fgetxattr(r3, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000340)=""/36, 0x24) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000440)={0x0, 0x2e5, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESDEC], 0x1}}, 0x0) sendmmsg(r6, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 04:05:57 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='./file0\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pipe(0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/69}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000300)={0x0, 0x17}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, 0x0) r6 = open(0x0, 0x0, 0x0) fadvise64(r6, 0x9, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000a6259c0900"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, r9, 0x1, 0x7, 0x6, @broadcast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000740)) [ 621.993684][T24359] overlayfs: workdir and upperdir must be separate subtrees 04:05:57 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:05:57 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00680032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a3915"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000089, 0x100000000000000) [ 622.243473][T24383] FAULT_INJECTION: forcing a failure. [ 622.243473][T24383] name failslab, interval 1, probability 0, space 0, times 0 04:05:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r6) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ftruncate(r4, 0x200004) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000000)) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) [ 622.346333][ C1] net_ratelimit: 22 callbacks suppressed [ 622.346343][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 622.358008][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 622.366442][T24383] CPU: 0 PID: 24383 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 622.375216][T24383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.385321][T24383] Call Trace: [ 622.388627][T24383] dump_stack+0x11d/0x181 [ 622.392982][T24383] should_fail.cold+0xa/0x1a [ 622.397606][T24383] __should_failslab+0xee/0x130 [ 622.402511][T24383] should_failslab+0x9/0x14 [ 622.407171][T24383] kmem_cache_alloc_node+0x39/0x660 [ 622.412444][T24383] ? __netlink_lookup+0x24e/0x300 [ 622.417503][T24383] __alloc_skb+0x8e/0x360 [ 622.421900][T24383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.428158][T24383] ? netlink_autobind.isra.0+0x135/0x170 [ 622.434823][T24383] netlink_sendmsg+0x667/0x8b0 [ 622.439617][T24383] ? netlink_unicast+0x4d0/0x4d0 04:05:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000008a, 0x100000000000000) 04:05:57 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e006c0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 622.444570][T24383] sock_sendmsg+0x9f/0xc0 [ 622.448933][T24383] ____sys_sendmsg+0x49d/0x4d0 [ 622.453726][T24383] ___sys_sendmsg+0xb5/0x100 [ 622.458334][T24383] ? __fget+0xb8/0x1d0 [ 622.462475][T24383] ? __fget_light+0xaf/0x190 [ 622.467081][T24383] ? __fdget+0x2c/0x40 [ 622.471371][T24383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 622.477638][T24383] __sys_sendmsg+0xa0/0x160 [ 622.483033][T24383] __x64_sys_sendmsg+0x51/0x70 [ 622.487896][T24383] do_syscall_64+0xcc/0x3a0 [ 622.492512][T24383] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 622.498477][T24383] RIP: 0033:0x45af49 [ 622.502387][T24383] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 622.521999][T24383] RSP: 002b:00007f8f78c23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.530469][T24383] RAX: ffffffffffffffda RBX: 00007f8f78c23c90 RCX: 000000000045af49 [ 622.538448][T24383] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 622.546425][T24383] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 622.554507][T24383] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f78c246d4 [ 622.562576][T24383] R13: 00000000004cab27 R14: 00000000004e4278 R15: 0000000000000004 [ 622.570757][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 622.576574][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 622.582367][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 622.588121][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 622.593899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 622.600312][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 622.654887][T24388] overlayfs: workdir and upperdir must be separate subtrees 04:05:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a3915"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:05:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000008b, 0x100000000000000) 04:05:58 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00740032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 622.826483][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 622.832376][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:05:58 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e007a0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 622.959238][T24409] overlayfs: workdir and upperdir must be separate subtrees 04:05:58 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) add_key$keyring(0x0, &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000440)='./file0\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) pipe(0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/69}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000300)={0x0, 0x17}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, 0x0) r6 = open(0x0, 0x0, 0x0) fadvise64(r6, 0x9, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de800000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000a6259c0900"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, r9, 0x1, 0x7, 0x6, @broadcast}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000740)) 04:05:58 executing program 3 (fault-call:1 fault-nth:1): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:05:58 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e08850032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000008c, 0x100000000000000) 04:05:58 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 623.262398][T24434] FAULT_INJECTION: forcing a failure. [ 623.262398][T24434] name failslab, interval 1, probability 0, space 0, times 0 [ 623.326502][T24434] CPU: 0 PID: 24434 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 623.335393][T24434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.345453][T24434] Call Trace: [ 623.348767][T24434] dump_stack+0x11d/0x181 [ 623.353126][T24434] should_fail.cold+0xa/0x1a [ 623.357782][T24434] __should_failslab+0xee/0x130 [ 623.362685][T24434] should_failslab+0x9/0x14 [ 623.367315][T24434] kmem_cache_alloc_node_trace+0x3b/0x670 [ 623.373152][T24434] ? memcg_kmem_put_cache+0x7c/0xc0 [ 623.378394][T24434] __kmalloc_node_track_caller+0x38/0x50 [ 623.384044][T24434] __kmalloc_reserve.isra.0+0x49/0xd0 [ 623.389601][T24434] __alloc_skb+0xc2/0x360 [ 623.393959][T24434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.400228][T24434] ? netlink_autobind.isra.0+0x135/0x170 [ 623.405892][T24434] netlink_sendmsg+0x667/0x8b0 [ 623.410697][T24434] ? netlink_unicast+0x4d0/0x4d0 [ 623.415651][T24434] sock_sendmsg+0x9f/0xc0 [ 623.420029][T24434] ____sys_sendmsg+0x49d/0x4d0 [ 623.424943][T24434] ___sys_sendmsg+0xb5/0x100 [ 623.429608][T24434] ? __fget+0xb8/0x1d0 [ 623.433694][T24434] ? __fget_light+0xaf/0x190 [ 623.438364][T24434] ? __fdget+0x2c/0x40 [ 623.442479][T24434] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 623.448736][T24434] __sys_sendmsg+0xa0/0x160 [ 623.453265][T24434] __x64_sys_sendmsg+0x51/0x70 [ 623.458108][T24434] do_syscall_64+0xcc/0x3a0 [ 623.462629][T24434] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 623.468642][T24434] RIP: 0033:0x45af49 [ 623.472732][T24434] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.492352][T24434] RSP: 002b:00007f8f78c23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.500978][T24434] RAX: ffffffffffffffda RBX: 00007f8f78c23c90 RCX: 000000000045af49 [ 623.509086][T24434] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 623.517141][T24434] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 623.525123][T24434] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f78c246d4 [ 623.533102][T24434] R13: 00000000004cab27 R14: 00000000004e4278 R15: 0000000000000004 [ 623.668691][T24442] overlayfs: workdir and upperdir must be separate subtrees 04:05:59 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000035000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:05:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000008d, 0x100000000000000) 04:05:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r6) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ftruncate(r4, 0x200004) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000000)) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 04:05:59 executing program 3 (fault-call:1 fault-nth:2): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:05:59 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 623.809548][T24455] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:59 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 623.897801][T24459] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 623.929496][T24461] FAULT_INJECTION: forcing a failure. [ 623.929496][T24461] name failslab, interval 1, probability 0, space 0, times 0 [ 623.999241][T24461] CPU: 1 PID: 24461 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 624.008973][T24461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.019129][T24461] Call Trace: [ 624.022448][T24461] dump_stack+0x11d/0x181 [ 624.026888][T24461] should_fail.cold+0xa/0x1a [ 624.031527][T24461] __should_failslab+0xee/0x130 [ 624.036497][T24461] should_failslab+0x9/0x14 [ 624.041049][T24461] kmem_cache_alloc+0x29/0x5d0 [ 624.045922][T24461] ? __rcu_read_unlock+0x66/0x3d0 [ 624.050962][T24461] ? memcg_kmem_put_cache+0x7c/0xc0 [ 624.056180][T24461] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 624.062096][T24461] skb_clone+0xf9/0x290 [ 624.066377][T24461] netlink_deliver_tap+0x428/0x4a0 [ 624.071512][T24461] netlink_unicast+0x43a/0x4d0 [ 624.076305][T24461] netlink_sendmsg+0x4d3/0x8b0 [ 624.081095][T24461] ? netlink_unicast+0x4d0/0x4d0 [ 624.086059][T24461] sock_sendmsg+0x9f/0xc0 [ 624.090416][T24461] ____sys_sendmsg+0x49d/0x4d0 [ 624.095256][T24461] ___sys_sendmsg+0xb5/0x100 [ 624.099872][T24461] ? __fget+0xb8/0x1d0 [ 624.103967][T24461] ? __fget_light+0xaf/0x190 [ 624.108638][T24461] ? __fdget+0x2c/0x40 [ 624.112723][T24461] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 624.119123][T24461] __sys_sendmsg+0xa0/0x160 [ 624.123749][T24461] __x64_sys_sendmsg+0x51/0x70 [ 624.128732][T24461] do_syscall_64+0xcc/0x3a0 [ 624.133266][T24461] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 624.139257][T24461] RIP: 0033:0x45af49 [ 624.143171][T24461] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.162781][T24461] RSP: 002b:00007f8f78c23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.171816][T24461] RAX: ffffffffffffffda RBX: 00007f8f78c23c90 RCX: 000000000045af49 [ 624.179818][T24461] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 624.187930][T24461] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 04:05:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000008e, 0x100000000000000) 04:05:59 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003f000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 624.195980][T24461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f78c246d4 [ 624.203963][T24461] R13: 00000000004cab27 R14: 00000000004e4278 R15: 0000000000000004 [ 624.221982][T24469] overlayfs: workdir and upperdir must be separate subtrees 04:05:59 executing program 3 (fault-call:1 fault-nth:3): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 624.343091][T24475] overlayfs: workdir and upperdir must be separate subtrees [ 624.415496][T24486] FAULT_INJECTION: forcing a failure. [ 624.415496][T24486] name failslab, interval 1, probability 0, space 0, times 0 [ 624.428174][T24486] CPU: 0 PID: 24486 Comm: syz-executor.3 Not tainted 5.5.0-rc1-syzkaller #0 [ 624.436858][T24486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.446917][T24486] Call Trace: [ 624.450393][T24486] dump_stack+0x11d/0x181 [ 624.454762][T24486] should_fail.cold+0xa/0x1a [ 624.459378][T24486] __should_failslab+0xee/0x130 [ 624.464245][T24486] should_failslab+0x9/0x14 [ 624.468872][T24486] kmem_cache_alloc+0x29/0x5d0 [ 624.473727][T24486] skb_clone+0xf9/0x290 [ 624.477967][T24486] dev_queue_xmit_nit+0x2a8/0x5e0 [ 624.483013][T24486] dev_hard_start_xmit+0x3f5/0x430 [ 624.488136][T24486] __dev_queue_xmit+0x14e9/0x1ba0 [ 624.493167][T24486] ? __write_once_size+0x5a/0xe0 [ 624.498124][T24486] dev_queue_xmit+0x21/0x30 [ 624.502716][T24486] netlink_deliver_tap+0x3d5/0x4a0 [ 624.507832][T24486] netlink_unicast+0x43a/0x4d0 [ 624.512628][T24486] netlink_sendmsg+0x4d3/0x8b0 [ 624.517391][T24486] ? netlink_unicast+0x4d0/0x4d0 [ 624.522407][T24486] sock_sendmsg+0x9f/0xc0 [ 624.526749][T24486] ____sys_sendmsg+0x49d/0x4d0 [ 624.531538][T24486] ___sys_sendmsg+0xb5/0x100 [ 624.536141][T24486] ? __fget+0xb8/0x1d0 [ 624.540276][T24486] ? __fget_light+0xaf/0x190 [ 624.544867][T24486] ? __fdget+0x2c/0x40 [ 624.548936][T24486] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 624.555176][T24486] __sys_sendmsg+0xa0/0x160 [ 624.559812][T24486] __x64_sys_sendmsg+0x51/0x70 [ 624.564686][T24486] do_syscall_64+0xcc/0x3a0 [ 624.569345][T24486] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 624.575359][T24486] RIP: 0033:0x45af49 [ 624.579331][T24486] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.599154][T24486] RSP: 002b:00007f8f78c23c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.607567][T24486] RAX: ffffffffffffffda RBX: 00007f8f78c23c90 RCX: 000000000045af49 04:06:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 624.615534][T24486] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 624.623600][T24486] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 624.633076][T24486] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8f78c246d4 [ 624.641130][T24486] R13: 00000000004cab27 R14: 00000000004e4278 R15: 0000000000000004 04:06:00 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000067000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SIOCRSACCEPT(r2, 0x89e3) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r6) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ftruncate(r4, 0x200004) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$VIDIOC_G_AUDOUT(r7, 0x80345631, &(0x7f0000000000)) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) 04:06:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000008f, 0x100000000000000) 04:06:00 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e007a0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:00 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00020032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 624.912878][T24496] overlayfs: workdir and upperdir must be separate subtrees 04:06:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000090, 0x100000000000000) [ 624.996825][T24505] netlink: 131078 bytes leftover after parsing attributes in process `syz-executor.5'. [ 625.038902][T24509] netlink: 131078 bytes leftover after parsing attributes in process `syz-executor.5'. 04:06:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000091, 0x100000000000000) 04:06:00 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00030032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 625.171050][T24511] overlayfs: workdir and upperdir must be separate subtrees [ 625.198730][T24508] overlayfs: workdir and upperdir must be separate subtrees [ 625.291053][T24524] netlink: 196614 bytes leftover after parsing attributes in process `syz-executor.5'. [ 625.315406][T24526] netlink: 196614 bytes leftover after parsing attributes in process `syz-executor.5'. 04:06:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:00 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a3915"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 625.627640][T24535] overlayfs: workdir and upperdir must be separate subtrees [ 625.662207][T24536] overlayfs: workdir and upperdir must be separate subtrees 04:06:01 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) geteuid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x2, 0x8000000006, 0x2, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r1, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 04:06:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000092, 0x100000000000000) 04:06:01 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00040032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000001c0)={0x10}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000040)="0f350f20e06635000040000f22e066b9800000c00f326635000800000f300f01d10fc7190f20e06635080000000f22e02e660f34650f0015260f79d0"}], 0xaaaaaaaaaaaac6a, 0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:06:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:01 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00050032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 626.103201][T24556] overlayfs: workdir and upperdir must be separate subtrees 04:06:01 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000093, 0x100000000000000) 04:06:01 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) semget(0x0, 0x0, 0x80) r1 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x8, 0x48181) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000001000009) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup2(r4, r4) syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xfffffffffffffeee, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x0, 0x200, 0x70bd29, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4004041) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2091240}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x0, 0x1, 0x101, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x43357d25e9359f0b) open(0x0, 0x2cc00, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) r5 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000100)) mq_timedsend(r5, 0x0, 0x2d1, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000100)) r7 = syz_open_pts(r6, 0x1) write(r7, &(0x7f0000000000)="d5", 0xfffffdc9) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x6) r8 = getpid() sched_setscheduler(r8, 0x5, &(0x7f00000002c0)) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r9, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) dup3(r7, r6, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000140)=0x2) 04:06:01 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:02 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00060032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:02 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 626.536820][T24592] overlayfs: workdir and upperdir must be separate subtrees 04:06:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000094, 0x100000000000000) 04:06:02 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00070032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:02 executing program 1: socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x1, 0x2) memfd_create(0x0, 0x0) lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000380)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x16000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000240)={0x0, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, &(0x7f0000000140)="439e9f253dd45a964417f6bed97ab20700cd6c8ba54111880e724cf8d28975"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) prctl$PR_GET_THP_DISABLE(0x2a) ftruncate(0xffffffffffffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x6}) perf_event_open(0x0, r7, 0x1, r8, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000001c0)={0x10}) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$VIDIOC_SUBDEV_G_EDID(r11, 0xc0285628, &(0x7f0000000200)={0x0, 0xffffffff, 0x40000002}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 04:06:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000095, 0x100000000000000) [ 626.896493][T24596] overlayfs: workdir and upperdir must be separate subtrees [ 626.899694][T24607] overlayfs: workdir and upperdir must be separate subtrees 04:06:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) write$binfmt_aout(r3, &(0x7f0000000140)={{0x10b, 0x8, 0x40, 0x3b8, 0x2, 0xfffffff9, 0x50, 0xfffffffb}, "", [[], [], [], [], []]}, 0x520) 04:06:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:02 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000a0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000096, 0x100000000000000) 04:06:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:02 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000e0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 627.336204][T24635] overlayfs: workdir and upperdir must be separate subtrees 04:06:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000097, 0x100000000000000) 04:06:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 627.504065][T24657] net_ratelimit: 39 callbacks suppressed [ 627.504076][T24657] openvswitch: netlink: Flow key attr not present in new flow. 04:06:03 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000f0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 627.594310][T24662] overlayfs: workdir and upperdir must be separate subtrees 04:06:03 executing program 1: socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000480)='/dev/vbi#\x00', 0x1, 0x2) memfd_create(0x0, 0x0) lstat(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000380)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x16000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(0x0, 0x1, 0x2) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x00', 0x0) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf18001, 0xeefffdef) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0xa, 0x80001, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000240)={0x0, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, &(0x7f0000000140)="439e9f253dd45a964417f6bed97ab20700cd6c8ba54111880e724cf8d28975"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) prctl$PR_GET_THP_DISABLE(0x2a) ftruncate(0xffffffffffffffff, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) r7 = getpid() sched_setscheduler(r7, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x6}) perf_event_open(0x0, r7, 0x1, r8, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeefffdef) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f00000001c0)={0x10}) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) r11 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r11, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$VIDIOC_SUBDEV_G_EDID(r11, 0xc0285628, &(0x7f0000000200)={0x0, 0xffffffff, 0x40000002}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 04:06:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000098, 0x100000000000000) 04:06:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x60, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 627.860363][T24676] openvswitch: netlink: Flow key attr not present in new flow. 04:06:03 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:03 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00480032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:03 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x1000000000000099, 0x100000000000000) [ 628.105362][T24692] openvswitch: netlink: Flow key attr not present in new flow. 04:06:03 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e004c0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000009a, 0x100000000000000) 04:06:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x771, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 628.212809][T24695] overlayfs: workdir and upperdir must be separate subtrees 04:06:03 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000009b, 0x100000000000000) [ 628.350804][T24713] openvswitch: netlink: Flow key attr not present in new flow. [ 628.378555][T24700] overlayfs: workdir and upperdir must be separate subtrees [ 628.586336][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 628.592201][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:06:04 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000180)) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$radio(0x0, 0x3, 0x2) write$UHID_CREATE(r2, &(0x7f00000001c0), 0x120) fsetxattr(r1, 0x0, &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xc80) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xfffffcee) r8 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000740)={{{@in=@rand_addr=0x6, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x6000, 0x4e24, 0x0, 0x0, 0x120, 0xb0, 0x87, r7, r8}, {0x80000000, 0x8, 0x3, 0x8000, 0x4, 0x3, 0x3, 0x80000001}, {0x2, 0x0, 0x2d7, 0x804}, 0x5, 0x6e6bba, 0x1, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0x3c}, 0xa, @in=@loopback, 0x3504, 0x3, 0x1, 0x40, 0xfffffffb, 0x4, 0x8}}, 0xe8) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) sendto$inet(r2, &(0x7f0000000500)="6bb3c52c9f9ee86fb44dd6dc311a5ce87cceec4f44bc92332c8e5679eeb388043617f453f635c27f182a94970cc816601581123226410da19532680e6ad975e371655576ffebf328cd76a9c74309e2176ea6423d50a60a3570442636ed0058f5e9afb28dfa55c5b3bf9091f842b933f3613d71781d57e1462f0c5641acb96de4349e3708260d50da9d9ccbc1b5f1f59e3bdec5e142749b2c31e63feeb49e2a114fb909cadb96aa29074a52c25fc0685ecc2e8d00c4eb701e047e579ce810259a431180db51a0062f958971f4dda1be03019c7c4fbe7addc43f", 0xd9, 0x4000008, 0x0, 0x0) 04:06:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:04 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00500032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 628.746379][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 628.752209][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:06:04 executing program 0: ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000000)={0x2b, 0x3}) r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000f400000000180012001000010069703665727370616e000000040002000c0001000180c20000000000"], 0x44}}, 0x0) 04:06:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000009c, 0x100000000000000) [ 628.819983][T24728] openvswitch: netlink: Flow key attr not present in new flow. [ 628.826360][ C0] protocol 88fb is buggy, dev hsr_slave_0 04:06:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000009d, 0x100000000000000) 04:06:04 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) syz_mount_image$gfs2(&(0x7f0000000440)='gfs2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='ignore_local_fsElocalflocks,\x00']) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x282, 0x0) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x5, 0x1}}, 0x5, 0x7, &(0x7f0000000040)="04fb1b839f"}) 04:06:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe00, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 628.923033][T24732] overlayfs: workdir and upperdir must be separate subtrees 04:06:04 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00600032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:04 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000400000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 629.489104][T24763] overlayfs: workdir and upperdir must be separate subtrees 04:06:05 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000180)) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$radio(0x0, 0x3, 0x2) write$UHID_CREATE(r2, &(0x7f00000001c0), 0x120) fsetxattr(r1, 0x0, &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xc80) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xfffffcee) r8 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000740)={{{@in=@rand_addr=0x6, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x6000, 0x4e24, 0x0, 0x0, 0x120, 0xb0, 0x87, r7, r8}, {0x80000000, 0x8, 0x3, 0x8000, 0x4, 0x3, 0x3, 0x80000001}, {0x2, 0x0, 0x2d7, 0x804}, 0x5, 0x6e6bba, 0x1, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0x3c}, 0xa, @in=@loopback, 0x3504, 0x3, 0x1, 0x40, 0xfffffffb, 0x4, 0x8}}, 0xe8) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) sendto$inet(r2, &(0x7f0000000500)="6bb3c52c9f9ee86fb44dd6dc311a5ce87cceec4f44bc92332c8e5679eeb388043617f453f635c27f182a94970cc816601581123226410da19532680e6ad975e371655576ffebf328cd76a9c74309e2176ea6423d50a60a3570442636ed0058f5e9afb28dfa55c5b3bf9091f842b933f3613d71781d57e1462f0c5641acb96de4349e3708260d50da9d9ccbc1b5f1f59e3bdec5e142749b2c31e63feeb49e2a114fb909cadb96aa29074a52c25fc0685ecc2e8d00c4eb701e047e579ce810259a431180db51a0062f958971f4dda1be03019c7c4fbe7addc43f", 0xd9, 0x4000008, 0x0, 0x0) 04:06:05 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x1526, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 04:06:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000009e, 0x100000000000000) 04:06:05 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00680032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000400000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:05 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e006c0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7107, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 630.067864][T24777] overlayfs: workdir and upperdir must be separate subtrees 04:06:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x100000000000009f, 0x100000000000000) 04:06:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000400000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x34000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:05 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00740032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 630.552818][T24804] overlayfs: workdir and upperdir must be separate subtrees 04:06:06 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000180)) close(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x22}, 0xc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$radio(0x0, 0x3, 0x2) write$UHID_CREATE(r2, &(0x7f00000001c0), 0x120) fsetxattr(r1, 0x0, &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x1) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0xc80) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xfffffcee) r8 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000740)={{{@in=@rand_addr=0x6, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x6000, 0x4e24, 0x0, 0x0, 0x120, 0xb0, 0x87, r7, r8}, {0x80000000, 0x8, 0x3, 0x8000, 0x4, 0x3, 0x3, 0x80000001}, {0x2, 0x0, 0x2d7, 0x804}, 0x5, 0x6e6bba, 0x1, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d4, 0x3c}, 0xa, @in=@loopback, 0x3504, 0x3, 0x1, 0x40, 0xfffffffb, 0x4, 0x8}}, 0xe8) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r5, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac610ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) sendto$inet(r2, &(0x7f0000000500)="6bb3c52c9f9ee86fb44dd6dc311a5ce87cceec4f44bc92332c8e5679eeb388043617f453f635c27f182a94970cc816601581123226410da19532680e6ad975e371655576ffebf328cd76a9c74309e2176ea6423d50a60a3570442636ed0058f5e9afb28dfa55c5b3bf9091f842b933f3613d71781d57e1462f0c5641acb96de4349e3708260d50da9d9ccbc1b5f1f59e3bdec5e142749b2c31e63feeb49e2a114fb909cadb96aa29074a52c25fc0685ecc2e8d00c4eb701e047e579ce810259a431180db51a0062f958971f4dda1be03019c7c4fbe7addc43f", 0xd9, 0x4000008, 0x0, 0x0) [ 630.822538][ T27] audit: type=1804 audit(1579061166.297:478): pid=24782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir449464071/syzkaller.49NQd6/486/file0" dev="sda1" ino=16814 res=1 [ 630.886496][ T27] audit: type=1804 audit(1579061166.347:479): pid=24815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir449464071/syzkaller.49NQd6/486/file0" dev="sda1" ino=16814 res=1 [ 630.926454][ T27] audit: type=1800 audit(1579061166.387:480): pid=24782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16814 res=0 04:06:06 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000040)={0x0, 0x7530}, 0x10) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xa6ba0) io_setup(0x4, &(0x7f0000000180)=0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x81, 0x1, 0x3f, 0x1, 0x0, 0x101, 0x4004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x40, 0xe21bf5a1ec0ebacf, @perf_bp={&(0x7f0000000140), 0x4}, 0x1526, 0x3, 0x7fffffff, 0x0, 0x8, 0x5, 0x5}, 0x0, 0x5, r4, 0x2) io_submit(r3, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 04:06:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a0, 0x100000000000000) 04:06:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400300, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:06 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e007a0032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a1, 0x100000000000000) 04:06:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:06 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000332000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 631.373761][T24834] overlayfs: workdir and upperdir must be separate subtrees 04:06:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0005000000000000400000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a2, 0x100000000000000) 04:06:07 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000532000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 631.907866][T24864] overlayfs: workdir and upperdir must be separate subtrees [ 632.127742][T24862] overlayfs: filesystem on './file1' not supported 04:06:07 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:07 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000632000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a3, 0x100000000000000) 04:06:07 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:07 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:07 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000732000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 632.492443][T24889] overlayfs: workdir and upperdir must be separate subtrees 04:06:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a4, 0x100000000000000) [ 632.634802][T24887] overlayfs: filesystem on './file1' not supported [ 632.672649][T24905] net_ratelimit: 27 callbacks suppressed 04:06:08 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00850832000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 632.672657][T24905] openvswitch: netlink: Flow key attr not present in new flow. 04:06:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, 0x0) accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 632.746338][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 632.752226][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:06:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 632.799881][T24904] overlayfs: workdir and upperdir must be separate subtrees 04:06:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a5, 0x100000000000000) 04:06:08 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="000500000000000040000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:08 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000a32000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 632.906354][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 632.912147][ C0] protocol 88fb is buggy, dev hsr_slave_1 04:06:08 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x10000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x9008, 0x2}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000100), 0x8) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x5}}, 0x18) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x3c4, 0x0, 0x0, 0x0) close(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1002080}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x124, r4, 0x618, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x4002) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x2, r6}) r7 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x9007, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r5, 0xbffffffffffffffb, 0xffffffffffffffff, 0x0) fcntl$setstatus(r7, 0x4, 0x42000) r8 = creat(&(0x7f0000000880)='./file0\x00', 0x40) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f0000000240)="ace22c46a9bccd1f7bab843e36edf0efabebccecfa551f6468fa544c367703ea26b417f9d6b7eb7006ccc4d1cece33b68425373fe778b7f4f4c405527053f14751df1a623f683992cb6b268f6b6384b2872c2aa30e48fc893d96ee013c144fdaa7598da6088e0315666aad4eee8f5b7f2473e04b284b038d2081c337be97284574b4512f18be6680c20e6b7299b55e73ae902fa8c477ffca482a6df990e231b74300e760a5c960a78a7284ed50ae089193f89157474c1f159e826639a3fe5e8a7f29fdc39cc99b6955ab426d75543b45c84cef27108b8ca57aab5f28dff5a02dd5cc87402548ff02f8d3fdd0deb94d50adbb96fef5822012f46ca084fc6dbe62") ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 632.986410][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 632.992221][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 632.998899][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 633.004651][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 633.007921][T24923] openvswitch: netlink: Flow key attr not present in new flow. [ 633.134252][T24918] overlayfs: workdir and upperdir must be separate subtrees 04:06:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:08 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x206a03, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x10}) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) listen(r4, 0x3) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000080)={r0}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e24, @multicast1}}) 04:06:08 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a6, 0x100000000000000) 04:06:08 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000e32000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 633.315131][T24934] overlayfs: filesystem on './file1' not supported 04:06:08 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, 0x0) accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:08 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000f32000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xe000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:08 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x8) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x3}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)="9305f99c48fe5c6bbb6ebfdae68a", 0xe}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01}, 0x0, 0x517}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:06:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a7, 0x100000000000000) 04:06:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x7530}}, &(0x7f0000000080)) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfff}}, 0x24) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x80000001, 0x96f, 0x8000000000000000, 0x1c0000, 0x0, 0x0, 0x0, 0x6, 0x2, 0x10001, 0x0, 0x0, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) listen(r0, 0x5) listen(r0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0xc) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) shutdown(r1, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:06:09 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00002032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 633.819335][T24968] overlayfs: workdir and upperdir must be separate subtrees 04:06:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a8, 0x100000000000000) 04:06:09 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00004032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:09 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, 0x0) accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000a9, 0x100000000000000) 04:06:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x60000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x7530}}, &(0x7f0000000080)) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfff}}, 0x24) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x80000001, 0x96f, 0x8000000000000000, 0x1c0000, 0x0, 0x0, 0x0, 0x6, 0x2, 0x10001, 0x0, 0x0, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) listen(r0, 0x5) listen(r0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0xc) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) shutdown(r1, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:06:09 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x8) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {0x2, 0xf0, 0x3}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f0000000140)="9305f99c48fe5c6bbb6ebfdae68a", 0xe}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01}, 0x0, 0x517}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 04:06:09 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00004832000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 634.379225][T24996] overlayfs: workdir and upperdir must be separate subtrees 04:06:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000aa, 0x100000000000000) 04:06:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x71070000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="06000000ff7f0000a000000000000000030000008a0e000009000000b00000000600000000ffffff03000000060000000400000066ffffff0104000003000000ffffff7fb2010000090000000600000002000000fe00000002000000221a0000050000005a000000070000008f1e000008000000ff0700000c000000ff7f0000bd5d000007000000f7ffffff02000000010000000400000009000000000000001f0000007f00000000000000089800000100000000100000010000008f00000008000000010000809f000000090000007e000000080a000002000000ff0000000100000009000000b58e0000d00900000cc2ffff030000000bbc000003000000f9000000800800004e64000004000000c0ffffff03000000050000007c0e000009000000e2ffffff020000000000000007000000ed000000380000000300000008000000"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:10 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, 0x0) accept4(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:10 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00004c32000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000ab, 0x100000000000000) 04:06:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x7530}}, &(0x7f0000000080)) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfff}}, 0x24) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2}}, [0x80000001, 0x96f, 0x8000000000000000, 0x1c0000, 0x0, 0x0, 0x0, 0x6, 0x2, 0x10001, 0x0, 0x0, 0x6, 0x5, 0x5]}, &(0x7f0000000180)=0x100) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) listen(r0, 0x5) listen(r0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0xc) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x14) shutdown(r1, 0x0) open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:06:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000ac, 0x100000000000000) 04:06:10 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00005032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:10 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff7, 0x3) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xfffffffffffffffd, 0xe8000) splice(r3, 0x0, r2, 0x0, 0x1000000008, 0x0) [ 634.967485][T25035] overlayfs: workdir and upperdir must be separate subtrees [ 635.087700][T25027] overlayfs: workdir and upperdir must be separate subtrees 04:06:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:10 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x3, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000003c3) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x10000, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1000}, 0x1) 04:06:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000ad, 0x100000000000000) 04:06:10 executing program 0: write(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0x24f) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1\x00', r2}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="1a0000001f02000000ec000000000000000000000000000007000000f5af40cd333b745a6e3fdbb04d8e446182e95db7576626f8c82d84d27f8b1ca2cf15895aeecb6f58439605000000c7da1f6f81a8d0e61972a874563787672ecfd349886aaebf21fba0d968609f62d301969bf41e38a2153e7665adaf85ad97539ea359501e8350d96a43d9df15a8c2b621f661bef261257a2d8e"]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = dup3(r4, r5, 0x0) r7 = dup2(r6, 0xffffffffffffffff) mmap$xdp(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x180000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x2}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x1, 0x5, 0xfffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup3(r8, r9, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4138ae84, 0x0) dup2(r11, r10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r14 = dup3(r12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r13, 0x4138ae84, &(0x7f0000000200)=ANY=[]) dup2(r14, r13) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r15 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r15, 0x4090ae82, 0x0) r16 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xffffffffffffffd9, 0x0, 0x0, 0x0, 0x0, 0xfff], 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x188) r17 = socket(0x2, 0x0, 0x0) r18 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r18, 0x1, r17, &(0x7f0000000080)) epoll_wait(r18, &(0x7f000000affb)=[{}], 0x1, 0x0) shutdown(r17, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r19 = epoll_create1(0x0) shutdown(0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, r19, 0x0) r20 = socket(0x2, 0x802, 0x0) r21 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r21, 0x1, r20, &(0x7f0000000080)) epoll_wait(0xffffffffffffffff, &(0x7f000000affb)=[{}], 0x1, 0x0) dup3(r20, r21, 0x0) r22 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r22, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_wait(r22, &(0x7f000000affb)=[{}], 0x1, 0xd899) shutdown(0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, r22, 0x0) r23 = socket(0x2, 0x802, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xd899) shutdown(r23, 0x1) dup3(r23, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f000000affb)=[{}], 0x1, 0xd899) shutdown(0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r24 = epoll_create1(0x0) epoll_wait(r24, &(0x7f000000affb)=[{}], 0x1, 0xd899) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) 04:06:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:10 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00006032000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) [ 635.450445][T25070] overlayfs: workdir and upperdir must be separate subtrees 04:06:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000ae, 0x100000000000000) 04:06:11 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffff5, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0xfffffffffffffee4, &(0x7f0000000040)="1c04ff01da6da9725f90c5a06d0f", 0x0, 0xf0}, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in, @in6}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@initdev}}, &(0x7f0000000380)=0xe8) socket$inet(0x2, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x0, 0x2, 0x0) symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 04:06:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff9e, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:11 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00006832000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000af, 0x100000000000000) 04:06:11 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00006c32000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) [ 635.990791][T25106] overlayfs: workdir and upperdir must be separate subtrees [ 636.229470][T25136] overlayfs: filesystem on './file1' not supported 04:06:11 executing program 0: write(0xffffffffffffffff, &(0x7f0000000000), 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0x24f) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1\x00', r2}) open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="1a0000001f02000000ec000000000000000000000000000007000000f5af40cd333b745a6e3fdbb04d8e446182e95db7576626f8c82d84d27f8b1ca2cf15895aeecb6f58439605000000c7da1f6f81a8d0e61972a874563787672ecfd349886aaebf21fba0d968609f62d301969bf41e38a2153e7665adaf85ad97539ea359501e8350d96a43d9df15a8c2b621f661bef261257a2d8e"]}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@empty, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = dup3(r4, r5, 0x0) r7 = dup2(r6, 0xffffffffffffffff) mmap$xdp(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x180000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r7, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x2}, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x1, 0x5, 0xfffffffb}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r11 = dup3(r8, r9, 0x0) ioctl$KVM_SET_CPUID(r10, 0x4138ae84, 0x0) dup2(r11, r10) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r13 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r14 = dup3(r12, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r13, 0x4138ae84, &(0x7f0000000200)=ANY=[]) dup2(r14, r13) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r15 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r15, 0x4090ae82, 0x0) r16 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r16, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0xffffffffffffffd9, 0x0, 0x0, 0x0, 0x0, 0xfff], 0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x188) r17 = socket(0x2, 0x0, 0x0) r18 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r18, 0x1, r17, &(0x7f0000000080)) epoll_wait(r18, &(0x7f000000affb)=[{}], 0x1, 0x0) shutdown(r17, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r19 = epoll_create1(0x0) shutdown(0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, r19, 0x0) r20 = socket(0x2, 0x802, 0x0) r21 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r21, 0x1, r20, &(0x7f0000000080)) epoll_wait(0xffffffffffffffff, &(0x7f000000affb)=[{}], 0x1, 0x0) dup3(r20, r21, 0x0) r22 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r22, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) epoll_wait(r22, &(0x7f000000affb)=[{}], 0x1, 0xd899) shutdown(0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, r22, 0x0) r23 = socket(0x2, 0x802, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xd899) shutdown(r23, 0x1) dup3(r23, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f000000affb)=[{}], 0x1, 0xd899) shutdown(0xffffffffffffffff, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r24 = epoll_create1(0x0) epoll_wait(r24, &(0x7f000000affb)=[{}], 0x1, 0xd899) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x0) 04:06:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(r4, 0x0, &(0x7f0000000200), 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:11 executing program 5: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00007432000535d25a80648c63940d0124fc60100002400a000200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 04:06:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0xea3b5d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r2, &(0x7f0000000480), 0x10000000000000b0, 0x100000000000000) 04:06:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0b00000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) 04:06:11 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xe803, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000740)=@l2, 0x80, 0x0}}], 0x1, 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000001c0)={0x10}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000005c0)=ANY=[@ANYBLOB="00050000000000004000000000000000", @ANYPTR=&(0x7f00000019c0)=ANY=[@ANYBLOB="44fb85462a4d5a92234f9c40f94010fd888759e0a81b10be758ca7e67b6dc09454faa34aa1724ac4e8552ee91d1fd664af9b618a89409048af5a2d1a9c63be46b797ec0b665b12c216a526425121891865c6e2fc38f0059eb3b430d65410fc63ca0b6280b8f2ff7120b2da104d087c501302abf10bfc7043370a213cecc12b69d71ccca4c7a1cca741c17d12edbe643d00006699d866c41ef863009b4c57a668b3b7032cf7469b04079caa87f3492b07b2c4616b4b72158d78678eb13df2011791d78521b7af13553ff85669f1e97ec10b12fa9fb88ca2db886cf21b92d0f0272b697a721e70ca5a762d36fdce4b9a39157f"], @ANYBLOB="eb000000ff0f0000040000001b0000005e060000f9ffffff", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="f5aba27e588feedf6a6ab69d29c0ea77094a13ad2cda8b3edaaa0ad83295f03e69c1a2092ffbae357d7ed702bdd50ed94c8a86650879aa2a9f6229bc2800499700d03f0bb7ddf8075be33e522a27061b2bbc75bf4058d13efa8ec4108fc8c2337412bbcc049ae68c43580735c6ff29e0015a861fba43f66a0dad658f9393725925f74fd4513eea350a5bc52999fef29f8f7b27d8cac6d3da90150311464b521175e92a78acbc0ad11919f2"], @ANYBLOB="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"]) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') accept4(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000200)=0x80, 0x800) exit(0x0) preadv(r4, &(0x7f0000000500), 0x37d, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x782cd827d178c842, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYBLOB="00672b4dbf"], 0x2) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001b40)={r8, 0xa3, "adb7120c209a781eaada757f72b47bf0ef199e5d31712be50c54ead32dc2c7a159ba79a082cfc3e52b090000004f71df634856c68cfc000000000076a74aedb7d7c4979ad3c9781d14f7a169b50b91166afa5fd32aad5162d64e17b7707c98529849b31949c0fcda96cf2df9a25c884f83efcbc2efd6d133074d94d6e55ec9672a1258afc56909595928df036bdf9490521d3738d0b280e512703ab590374b0a28736e"}, &(0x7f0000000500)=0xfffffffffffffdd2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000540)={r9, 0x401, 0x4, 0x1ff, 0xffffffe0, 0x8000}, 0x14) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f00000001c0)={0x10}) 04:06:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f00000032000535d25a80648c63940d0124fc6010000240", 0x18}], 0x1}, 0x0) [ 636.651052][T25158] overlayfs: workdir and upperdir must be separate subtrees [ 636.676397][T25155] ================================================================== [ 636.684535][T25155] BUG: KCSAN: data-race in __acct_update_integrals / vm_stat_account [ 636.693120][T25155] [ 636.695459][T25155] read to 0xffff88809fcd9200 of 8 bytes by interrupt on cpu 1: [ 636.703047][T25155] __acct_update_integrals+0x1b1/0x1e0 [ 636.708521][T25155] acct_account_cputime+0x4e/0x60 [ 636.713560][T25155] account_system_index_time+0xa2/0xb0 [ 636.719034][T25155] irqtime_account_process_tick.isra.0+0x16a/0x1b0 [ 636.725551][T25155] account_process_tick+0x14e/0x190 [ 636.730770][T25155] update_process_times+0x29/0x80 [ 636.735805][T25155] tick_sched_handle+0x75/0x100 [ 636.740663][T25155] tick_sched_timer+0x58/0xe0 [ 636.745355][T25155] __hrtimer_run_queues+0x274/0x5f0 [ 636.750567][T25155] hrtimer_interrupt+0x22a/0x480 [ 636.755519][T25155] smp_apic_timer_interrupt+0xdc/0x280 [ 636.760983][T25155] apic_timer_interrupt+0xf/0x20 [ 636.765920][T25155] widen_string+0x2c/0x1a0 [ 636.770340][T25155] string_nocheck+0xe0/0x100 [ 636.774948][T25155] string+0x97/0xa0 [ 636.778764][T25155] vsnprintf+0x574/0xb40 [ 636.783009][T25155] tomoyo_supervisor+0xc3/0xd20 [ 636.787942][T25155] tomoyo_path_number_perm+0x323/0x3c0 [ 636.793400][T25155] tomoyo_file_ioctl+0x2c/0x40 [ 636.798165][T25155] security_file_ioctl+0x6d/0xa0 [ 636.803107][T25155] ksys_ioctl+0x64/0xe0 [ 636.807645][T25155] __x64_sys_ioctl+0x4c/0x60 [ 636.812857][T25155] do_syscall_64+0xcc/0x3a0 [ 636.817391][T25155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 636.823363][T25155] [ 636.825699][T25155] write to 0xffff88809fcd9200 of 8 bytes by task 25155 on cpu 0: [ 636.833427][T25155] vm_stat_account+0x45/0x150 [ 636.838121][T25155] mprotect_fixup+0x311/0x510 [ 636.842807][T25155] do_mprotect_pkey+0x3eb/0x660 [ 636.847663][T25155] __x64_sys_mprotect+0x51/0x70 [ 636.852534][T25155] do_syscall_64+0xcc/0x3a0 [ 636.857044][T25155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 636.863133][T25155] [ 636.865454][T25155] Reported by Kernel Concurrency Sanitizer on: [ 636.871607][T25155] CPU: 0 PID: 25155 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 636.880283][T25155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.890351][T25155] ================================================================== [ 636.898409][T25155] Kernel panic - not syncing: panic_on_warn set ... [ 636.905002][T25155] CPU: 0 PID: 25155 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 636.913665][T25155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 636.923716][T25155] Call Trace: [ 636.927014][T25155] dump_stack+0x11d/0x181 [ 636.931359][T25155] panic+0x210/0x640 [ 636.935260][T25155] ? vprintk_func+0x8d/0x140 [ 636.939858][T25155] kcsan_report.cold+0xc/0xd [ 636.944455][T25155] kcsan_setup_watchpoint+0x3fe/0x460 [ 636.949849][T25155] __tsan_unaligned_write8+0xc7/0x110 [ 636.955229][T25155] vm_stat_account+0x45/0x150 [ 636.959925][T25155] mprotect_fixup+0x311/0x510 [ 636.964629][T25155] do_mprotect_pkey+0x3eb/0x660 [ 636.970895][T25155] __x64_sys_mprotect+0x51/0x70 [ 636.975753][T25155] do_syscall_64+0xcc/0x3a0 [ 636.980280][T25155] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 636.986186][T25155] RIP: 0033:0x45b047 [ 636.990102][T25155] Code: 00 00 00 b8 0b 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 637.009711][T25155] RSP: 002b:00007ffd73fafe18 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 637.019007][T25155] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 000000000045b047 [ 637.027004][T25155] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00007f54d41f1000 [ 637.034975][T25155] RBP: 00007ffd73faff00 R08: 000000000071e800 R09: 000000000071e800 [ 637.042948][T25155] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd73fafff0 [ 637.050920][T25155] R13: 00007f54d4211700 R14: 00007f54d42119c0 R15: 000000000075bfd4 [ 637.060418][T25155] Kernel Offset: disabled [ 637.064755][T25155] Rebooting in 86400 seconds..