x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66576c65308b02d282c300a1f83dfb68e9d6867fe7c0eb8b100576987a7dfaa8a1fed461069ecca85c7d5c0707e8bf"], 0x34) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x6]}}}}]}, 0x48}}, 0x0) 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66576c65308b02d282c300a1f83dfb68e9d6867fe7c0eb8b100576987a7dfaa8a1fed461069ecca85c7d5c0707e8bf"], 0x34) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:20 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0xd}) 03:07:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x14]}}}}]}, 0x48}}, 0x0) 03:07:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x803}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66576c65308b02d282c300a1f83dfb68e9d6867fe7c0eb8b100576987a7dfaa8a1fed461069ecca85c7d5c0707e8bf"], 0x34) sendto$inet(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 623.420325][T12894] overlayfs: unrecognized mount option " " or missing value 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66576c65308b02d282c300a1f83dfb68e9d6867fe7c0eb8b100576987a7dfaa8a1fed461069ecca85c7d5c0707e8bf"], 0x34) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:20 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0xe}) [ 623.511233][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 623.517050][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x8]}}}}]}, 0x48}}, 0x0) 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 623.671189][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 623.677171][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 623.682798][T12925] overlayfs: unrecognized mount option "" or missing value 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:20 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x18]}}}}]}, 0x48}}, 0x0) 03:07:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:20 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x10}) 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:20 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x9]}}}}]}, 0x48}}, 0x0) 03:07:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xb00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 623.940739][T12954] overlayfs: unrecognized mount option "" or missing value 03:07:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x60]}}}}]}, 0x48}}, 0x0) 03:07:20 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x11}) 03:07:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:21 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 624.268818][T12984] overlayfs: unrecognized mount option "" or missing value [ 624.304911][T12980] overlayfs: unrecognized mount option "" or missing value 03:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xd00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0xa]}}}}]}, 0x48}}, 0x0) 03:07:21 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x12}) 03:07:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2}}}]}, 0x48}}, 0x0) 03:07:21 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 624.536180][T13006] overlayfs: unrecognized mount option "" or missing value 03:07:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0xb]}}}}]}, 0x48}}, 0x0) 03:07:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x14}) 03:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x2]}}}}]}, 0x48}}, 0x0) 03:07:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 624.777407][T13039] overlayfs: unrecognized mount option "" or missing value 03:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xfbb}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x21}) 03:07:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x3]}}}}]}, 0x48}}, 0x0) 03:07:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x1100}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0xc]}}}}]}, 0x48}}, 0x0) [ 624.983297][T13055] overlayfs: unrecognized mount option "!" or missing value 03:07:21 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x23}) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 625.219819][T13083] overlayfs: unrecognized mount option "#" or missing value 03:07:22 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x25}) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0xf]}}}}]}, 0x48}}, 0x0) 03:07:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x4]}}}}]}, 0x48}}, 0x0) 03:07:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xb}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x1900}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 625.494793][T13106] overlayfs: unrecognized mount option "%" or missing value 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x2c}) 03:07:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x10]}}}}]}, 0x48}}, 0x0) 03:07:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x5]}}}}]}, 0x48}}, 0x0) 03:07:22 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:22 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x30}) 03:07:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x11]}}}}]}, 0x48}}, 0x0) 03:07:22 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 626.091862][T13170] overlayfs: unrecognized mount option "0" or missing value 03:07:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:23 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0x5c}) 03:07:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x6]}}}}]}, 0x48}}, 0x0) 03:07:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xf}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x12]}}}}]}, 0x48}}, 0x0) 03:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, 0x0, 0x0) 03:07:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4788}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 626.338521][T13194] overlayfs: unrecognized mount option "\" or missing value 03:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, 0x0, 0x0) 03:07:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, 0x0, 0x0) 03:07:23 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0xa1}) 03:07:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x8]}}}}]}, 0x48}}, 0x0) 03:07:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x13]}}}}]}, 0x48}}, 0x0) 03:07:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0xc]}}}}]}, 0x48}}, 0x0) 03:07:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 626.645049][T13224] overlayfs: unrecognized mount option "¡" or missing value 03:07:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4888}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 626.710923][T13224] overlayfs: unrecognized mount option "¡" or missing value 03:07:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x9]}}}}]}, 0x48}}, 0x0) 03:07:23 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [], 0xff}) 03:07:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x14]}}}}]}, 0x48}}, 0x0) 03:07:23 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 626.892939][T13243] validate_nla: 44 callbacks suppressed [ 626.892946][T13243] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 626.918121][T13248] overlayfs: unrecognized mount option "ÿ" or missing value [ 626.948861][T13243] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:24 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) recvfrom$x25(r1, &(0x7f0000000040)=""/159, 0x9f, 0x40, &(0x7f0000000140)={0x9, @null=' \x00'}, 0x12) 03:07:24 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 627.092911][T13260] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 627.129821][T13260] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0xa]}}}}]}, 0x48}}, 0x0) 03:07:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x18]}}}}]}, 0x48}}, 0x0) 03:07:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x12}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 627.270432][T13270] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:24 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 03:07:24 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 627.380676][T13281] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 627.404694][T13281] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0xb]}}}}]}, 0x48}}, 0x0) [ 627.557241][T13305] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 627.579224][T13305] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 627.609201][T13307] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:24 executing program 4: syz_mount_image$btrfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:24 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) 03:07:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x13}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x60]}}}}]}, 0x48}}, 0x0) 03:07:24 executing program 4: syz_mount_image$btrfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 627.835820][T13320] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 627.845118][T13320] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 627.904804][T13335] overlayfs: unrecognized mount option "upper€" or missing value 03:07:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0xc]}}}}]}, 0x48}}, 0x0) 03:07:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:24 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x152) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x20, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:25 executing program 4: syz_mount_image$btrfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4}}}]}, 0x48}}, 0x0) 03:07:25 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x18}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 628.231206][ C1] net_ratelimit: 24 callbacks suppressed [ 628.231211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 628.242778][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0xf]}}}}]}, 0x48}}, 0x0) 03:07:25 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x6, 0x978e}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:25 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x2]}}}}]}, 0x48}}, 0x0) 03:07:25 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', 0x0, 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 628.529521][T13403] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x10]}}}}]}, 0x48}}, 0x0) 03:07:25 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:07:25 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.SMACK64IPOUT\x00', &(0x7f00000002c0)='hostfs\x00', 0x7, 0x2) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='hostfs\x00', 0x40400, &(0x7f0000000140)='\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0xffffffff, 0x8000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x9c, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x88, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x28051}, 0x8080) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='index=ir=./bus,workdir=./file0,metacopy=on,\x00']) 03:07:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x3]}}}}]}, 0x48}}, 0x0) 03:07:25 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 628.888728][T13437] overlayfs: unrecognized mount option "index=ir=./bus" or missing value 03:07:25 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:07:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x8847}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x11]}}}}]}, 0x48}}, 0x0) [ 628.993753][T13437] overlayfs: unrecognized mount option "index=ir=./bus" or missing value 03:07:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x4]}}}}]}, 0x48}}, 0x0) 03:07:25 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x300}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:25 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10c02, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x8848}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:26 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 629.191214][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 629.197071][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 629.281198][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 629.287123][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x12]}}}}]}, 0x48}}, 0x0) [ 629.348331][T13464] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 629.362698][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 629.362750][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xbb0f}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x5]}}}}]}, 0x48}}, 0x0) 03:07:26 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdiR=./file1,lowerdir=./bus,workdir=./file0,gmetacopy=on,']) 03:07:26 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 03:07:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x500}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xe703}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 629.664805][T13493] overlayfs: unrecognized mount option "upperdiR=./file1" or missing value 03:07:26 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 629.751176][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 629.756998][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:26 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:26 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f662968b6f0678933a62b0528696c65312c6c6f7777726469723d0e2f66696c65302c6d657461636f70793d6f6e2c00"]) 03:07:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x13]}}}}]}, 0x48}}, 0x0) 03:07:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x6]}}}}]}, 0x48}}, 0x0) 03:07:26 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 03:07:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 630.011416][T13526] overlayfs: unrecognized mount option "lowwrdir=/file0" or missing value 03:07:27 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 03:07:27 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x900}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:27 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 03:07:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x14]}}}}]}, 0x48}}, 0x0) 03:07:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x8]}}}}]}, 0x48}}, 0x0) 03:07:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 630.473216][T13565] overlayfs: failed to resolve './file0': -2 03:07:27 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240), 0x0, 0x10000}], 0x0, 0x0) [ 630.633273][T13565] overlayfs: failed to resolve './file0': -2 03:07:27 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240), 0x0, 0x10000}], 0x0, 0x0) 03:07:27 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000001c0)=0x1c, 0x0) sendmmsg$sock(r0, &(0x7f0000005700)=[{{&(0x7f00000002c0)=@generic={0xb, "a4aa6b37d85c3cef67c2ee96d1c89f528b0d29ecfca3c9e72da9dbbded3e7bdd2975231b90b220300b76d41d8d103ef0266fa0f0a6bda5cd77bb07015c9a25e1566f0361567102f178eff3243e36584374b8d3ff287b8b62a741fbe78ee961fefb4991aa7eaa9d5a049ac07096e017548421447bf82aa4f1601945b5ff4b"}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000340)="261ebfcd66868eff4fa96b72c9de6cc660875003ee415d5ef9ae3faa988e0f06b183d965e9d45320664db437ac543ff29d7dd2a1a2826e899cff7584cce8c842fd6f41487e80f006bbb4a6360dd3c88e831bd376da7883691035474df9e65cd4916c01f5fa8bfd7137ea66d10718418f9a4a09eb27e4df2db9eade24043f46", 0x7f}, {&(0x7f0000000440)="97f334215a1ad4afd7cb9c11517a6547beaa9b3c8d8fd7dfbcb88d4065b5866283abacc46afe3a1ea25f46b94116cdba2ebd382f48dbe46d63ee1a64aaf37e933e3e4e8aec75b5f85491976932922c79fa9273c91f08179334a361bf1340af7d7895536fa8b8ea7b7c67ccfbb90de6a1843af4fbad05122905fae76fe50a07f8b8526a29e2c8f6a486d65f0b5024230671f8fe86e200ead5ac2b06d6c33f9941361a6a2b7013cb498639a7141dd65c8202c1de719b2f9040bf", 0xb9}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="5166ef40279e3204e5902e0a66e7f67c9c9249bac7946ea3f6f65d54f5e8795434d9d603d34011abbb2ce227964b0cee5fedae220661ba3f5580be63e7dc97a880a0b24194b33d5be4cd4863e0c6758538fd88fc1e57a97f0bbe8143821dc1af73fe607c8f78b1fe4efafb2d6dddab02f28acb03dc35276cd9ef0de8b977fe0d0a44d99169583e083688f23154d39b23a72a25c898882b4e9ad03568c3e938f1a80888c55e6138953fc5bdcf66e42c47280c10dbfd0cfeaae366b1495e98925ead2a5ebde74007095b8bab84a49ac3fbf8b3f1d735489ea37c74863fab34f484", 0xe0}, {&(0x7f0000001600)="b81644cac6940656188b42cc5e53315a01e6be5c8b5a9a04137d009ac168420febb11791bf83c11a395428247950d2647787aa57fd71ec5a563a12d72c19fc7df42caaf871564c7be8aaed8ba49b3d0d12893a20a085cc8c7455207119f87c2a65a43aad23343f629b8c5126bf7d06b9594901dbdd8b58c6e4f9be9af7da670e1a397810d26b3e221890d302725081243f7d071a794d78af5b5c6edafda5625a21f43ebfd93cf7f3f601b2012de303588add0bee885cca155b3c8fcbdabbfb414eaceca66f70752f9815f23029f02077919007c3f48ae8699c17c3adf8dda0", 0xdf}, {&(0x7f0000000200)="faa5a6e5a1da5094eb61c8d6f83ae6b8d53171a4d8a25724a438939edbf4b944", 0x20}, {&(0x7f00000003c0)="023fe09fa112ea51", 0x8}, {&(0x7f0000001700)="5a4bd34aef98843f6c2477686bca5f7181e026031f56b0b4bd0f121cafc8a845184ca5832bc4c51f36bf14f820ecaac074b6e68e2afd0f5760f8278279f3c43de7278bea3c56d51cdb0dd5fff992583b3d09c6f7d0ca68ff6627fd71", 0x5c}, {&(0x7f0000001780)="6b6151669226a65db09bcba63178266d46e1f87c06c06eba632cccef3b378a2421d5afa71b06c9c99217000928364c2785f8808fb3d6a630a046a6695d39eb54846082ae7e1559fb5bdbd3995a81ce9644ed3d1b67d255a42ef622b21403d743f75fa5566cb22ef2b8b1b5d7a1a42851", 0x70}, {&(0x7f0000001800)="420612ee8615d77ac3", 0x9}], 0xa, &(0x7f0000001900)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xf93}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0xa8}}, {{&(0x7f00000019c0)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001a40)="836889b55553a65151be9078da3b6f8dded0e78507f91255a270cada27662d5954aedfb76f4ac3d1820ff0d4dd81f6bd55890b9e834f0394ecacb878d27c532bf1517f43aceea81eda34522aec5921fc6551516ace7b7c67c1bedae1495b1c79e32516e8c09604c4f01f824a8ae5cd8b4f7a77adc8119e3fa41c543307184e80a719715345b13d058caec37459390e32a12f39a332a5f566188256b515b9299b30d1b255bc96e82cf958d88887ef8eee18f9f22b1b8927b4bca9ef6b", 0xbc}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="c9bae407ffd42fc5193b3e6aee2bde5feafa222bdac47220b670a00e7791c422c5be40a5a21b6650de057f8e2c3f6ad4fdc24a6fd230953e12e7b6170583acfed1f41bafdc947c1cb69ee8258fd550febcfb36351276c01f43bc3b55e878aaa7eae7fde8a18bf899c1bafcc558a73a020c31c4bba3328b9a1169368c0727aa0ea3", 0x81}, {&(0x7f0000002bc0)="89b860ab240a0a64af922f598f1f0a9db04addac2b1f3c1cfdbbc0ad2f3b4dbc94f445bfed4a8ddba8c108498d658152829cf1ba6968655fc4ef6c3ebb59c45ea2da79dd16d54841ac021b0ed2252839077fa8c7ff447cdc3d4b922eb58e3e71ea1ed5bba921f7fbffaec8e06a7672e700cd285979b623faf54b192588a86a25a4d6014f6d2d372004ea3b1db0a220156efb92efa1a9eb180280e4ae4bd2ed38514508e151dcae09186cb83de49a61acc802a6478b47290f69d05998610e51ce9fd4b6781f238708a808902b9eef84d5333921d514ced209812e936b", 0xdc}, {&(0x7f0000002cc0)="c9dbce42cc07d2f18ab80b4981158288b2247e93756d1b9f2c5351ad5c0bd132e7655c1213259b38b22f01a68b0369ea902c6470e4b2", 0x36}, {&(0x7f0000002d00)="84f7091b27e007b3622073c040e0b935f32628aa130502c1e700e414dcf64bcbc688e8b58ba3697a9e3075c5b75ed4c7e2c00d284d4383b19990ef4e956bb5d01a9e2a4b3d73d3d713904526b761e9ed0ef496c713071a9174064262b00117a2fd867768cfd3abb81fd3992e6b385d3cc3a406ad5bafd60465b44af052e4bd85758b91c9bc306214f69ebfc00789a7e707a135d9", 0x94}], 0x6, &(0x7f0000002e40)=[@txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x18}}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000002e80)="c61a289ff2b3dff97b5da751496a750576ad1f5dc2c183131fb2", 0x1a}, {&(0x7f0000002ec0)="1d8959e683f783a962ff3b105239c0345f8e7e6558d0108e4eeef83da8e1681c7d2e0e4055282acd8acf717beca9cc6bbd25ab1e56400417fb9b25fbdbb33e35db00787f1f19c724a88027839ab7f76ad5f5c6165d1519292340b67d7b35a1ae9ece129211eea34cdf9aa6cfd9bba472008bf4e64f5e0dad2acb872eeeeadcee8cceb103401f0d6af93c13599fd065624af8ba6a48108321f03d7145f37ee7a9cea2", 0xa2}, {&(0x7f0000002f80)="c4ae85bac530ad3edcc06305cf05ce51262e55118d0296d197212c2fe3c2071f0e78dedf9160c59a266987919964eee56a69939e65bf048365e4339acfea67ec599794c1f80d82482736ce0ec66a913901296d1a0c58b09e589d9c6390fdaee0d2", 0x61}, {&(0x7f0000003000)="10f04057d290acde3b3afc0698657e3c51a1e4fc6b3b41190ed95053902156963040d4ebb1f9d5d4ba12a9a101f12d74d15ab9a5fb139cc55687ba7024dfd9cd73ba4982e35b46c6079f6803f54d01467d94f655a33825fe402b6b4d27f1e76bf047896f06edadf81fe4951bc31322e05508c16e050ef6205c97c61837c46abf3df12267a019dd9518d21aeed14b71dbdeeea5c134545c6c651f9a72fb72a494b07d51ff29710dd179b6cc0522abaf69cfa226f909a2494cba5ba837cbc45fcbd64560", 0xc3}, {&(0x7f0000003100)="e13a5831058ad1a709cd2e26cc7b6b4107b2dcd7d7c2bc7dfad8c41d21ee7174d9ca61e2f2817dcd9dd623a80e9aea24bc4677963d3cf220fd064877910ddb1b42a310ebad84e438787eb362d5fddd481b3ea7f76b5e1a8f043efc582b8be373dc76f2bcc2fcc97c5eb9f7806b0b0cf8dfd4ef812cd241f3a40c", 0x7a}, {&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000004180)="596f50940a088f50e97c896ac7aafcdd9486d5272773bf0461b247831f30be7e289e70d38a640e321278d1d64721636f8c110df4f2359650c76d914372b89e0233b000", 0x43}, {&(0x7f0000004200)="f5a6f77c9c2c007f67e00f511ccfa0b357d2d23547eb169f4d6562e7cac523b6e8936994fca5875f1ee0cd38ce1b18f768e6db1a1294032894b2e53927e39bedeb6bef9b8bfd5a20abb5013b57dc5cd95a45351b350ccda9186426417ffdf255deb09a480e9fcb23cc9e", 0x6a}], 0x8, &(0x7f0000004300)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @txtime={{0x18, 0x1, 0x3d, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f00000043c0)="c0765d7220d6b5998d362774da7508240feb9e41e1ee9174a6cab9686ef4d0eb21ce8663128e283d1c76ab7da4fda2c7f2414f2dd3068d130224153c576af2d0ad4fb03660a47db17e134569562a18568b29a5ffccf5e07a92a7a8fbd9f59732370741e5af48f4262727e0ed48fc3fb0eaf51375ba298e73b0f16c6e79f61d4ada98d7b48e6be781fbb40515d8751270850bcc4750f11fab628ff121a599908dedea8723c5e66e25a6707b90be4dfa83d3a143adffbc", 0xb6}], 0x1, &(0x7f00000044c0)=[@txtime={{0x18, 0x1, 0x3d, 0x20}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18}}], 0xc0}}, {{&(0x7f0000004580)=@llc={0x1a, 0x306fe9af5591ec95, 0x4, 0x4, 0x81, 0x80, @broadcast}, 0x80, &(0x7f0000005600)=[{&(0x7f0000004600)="4aef6f20d31efb00359eebd9541c3ea5ced6ddfc00c167e0b18c1669df31510ee07615c0ed64f8a4f019dfff7ca8615508048978f61049eb98c02a75712bdbd6c7b6a91d77b7baf2bdf69747ab899344bf144768b62c0d45b5cee46e8b249a1f68d7e69e7b7fa39dddaba460cb398c4e9677bceaf5d74c282c745fdb20b70622fa851993e139fa7efd211cf6e44ce910206b878f79e7a825e856e21469b460acbc7084e4563cea58fb7e2df9db64e8a1d6a608d1fbb4f4f1ff6fce442d669cbb0725c18753565b3504866af1eb57ebdf01861d61ec47be481e9311078cc4e12e034b491b231f607e80c054be0ecff7116d2552079df3eb9746f4dbf080494ff18207f43d56151553a513f66c201a63d946c9ec6276b1cf9649433db7fc20ba7d5e7dd848f717fa0d0cc56602f25a6c31db6388668da2cb5f9679b99cd551c1ce221175af1c5ee22e396bf79722bd51e3ce5290d215256d7a691b69b71e6123217ae78821debf511d31540fc65d1c9940ea223f54934b6bc56c640eb6eef477a8c441f560e8979e3e6a7ca133e1adcb084710c270fdd409a8cead587c9b62fe682365d4deb9923d344f8e56ae0a492ef253656c5dd9ee6e215f3c63dc42d08a0fc9b69451cd3a64dee612e5896dbcda4cac73943b7d71a036cddc3bf85cd3d9e793069bf6d7ffb74353eada62f9ac6f44bef56cefb5b4ac4d6807e41aa47df59d82e9b611549776be398aa1daac2cfe59e368a8f3c6b8e455d27f6000f29d351f3084ff4b8d553a6502c971e4b75deb38ac61aa8fc19a7da8cec8aba2471e8e6aa047128fe6354d343c2bd95736c59871e7038d2f803be8c117d8e2fa96d5c19bd23e7363f11126a31954f5bdd35c06f1f858e489e3459f03aa48bdeef7ae2b79b7ffe22db98cf05bde4c648b5f504a7fad4db9ec70318337ff95f1135fbd8492bef02d3927b7c7c79e65f503062fa6bd7c6bce8b0bc7d7f30233fde1d3a46997c93904e8dd7d8b4bcc039d2f16ce1e208785a189281962915346ee064073dfd5d2c507767478f09d57e9d3204446e4fa531b9614dd7f25a09a36ff431659582cb442d9c32b9f0ca7cc9501c07f8d1ecb448abab1c54888752e07cecf4149e7057fa5f0fb4922ede9db3d714b58de7d37a54ee5ec924b9d59f814d1fda9988cee83f57dceae2219fd692386b9723e30fb90f34eaf82d2cd9428171b5aa086b71a79dc40e444968f8ed50d440214faae0765bea1e915c0a870e6570bf1dd8eda656fd1a0dba1de52acc8104aaf4964e007dc3f6670cf84eb86d598e839dd201f6c9122fdd64b535fbca2f62c14d0b1a053e44fc2435f953230e2081d1364295021a5048dac4a5ce5094711f95afe6de454ba098e97344842f8b0dbba8c238d77e3627ce68a21c758cd0df57ad0b40c7c26e59436044a7d20be4bb0666e8242ae076028f94fa71bb4742ef1e5098d454bac9221a0b2b199c06ce430724390099de882d8db87ec2a276f8814913c8b1b95947913e06d6cea58bbc51735cd1f31c5103e4044bdeb498ff143d376caaa18dc4be3f0e532825b6f81044e3e2b3667dbb2e44704a347f890061fc9f2c8879edf9b8321cf079c29eb620e350e37a04a19df8c64092e3f5026aa39583cc24fc9c686c7196062761e87217474b392ced7cf814eefcf4ca61db828b2afef1efe7692066f1f527d113414779485f1c3e9924c729157b3b45585384c84d7c5f1706b1b4979898e71f1ea5f8f510500f1092ae69c539d36472324a42144146619dd6e0d25301b6857bca5fe5762fe09da8d389e3b1612cd5dbc1145bf2440b46d9e29002a732eb304167f0eb6a72cd3b9aef6dd15e596097d2f3de58c6f825f8811af2a246e246204a14ebb7ab6761bd2b06af1685a808954e65d88b0a598377a13032c182bd455213d10ea2a2743168c240345918dbdb410d18e023b17060ebdb85533203d9ff8caebd06ebf0dee9933116ea45f40731d19298a12c79f7f8166161d81be2d72509c7adca91ebe0b56e55bdcb84a7c44e70f84901bf044fb2e25d0fed360759d9f511e73b1e13fce0990a5b5900be3b0039714a0c2ea85d98706bd979ab1313341c874fdf51fa48fc9a3804ad08a1a19652f4f449728a09cb44956e931c3dbb90d06cc0eaa79b92c4d4439fcda9e482ef2b3aa1b61a14e8e12d98b2e8c838bd9562cf3ef4127c841531997ef4ba62f01dbfe61fb8856c7a186d226934a971e732e3dc671369668290f831689928da055ae84cbf91bc9703046cfde2c90d6fc9085d4d2071bd3600c07b9bdc10b8c402523fc3df185191b0d4ca3d270afd7b32d6f66aa91fae76b8a4a9fc7553eb6f81927e5f5133ff6d49e2a244fa7031e7220e18a038146d7ded54da198dc2dbffe712f3ce60acdedf234d600fd38279c3a6176696af312203e8226658dacb1b8a77940e64aaf79d0ab3196902e8550142db2b7a0c0ff03d11f93112750d67626163b6180189aa82f77e052196d46d197a47b7cdc4dd6650c9d532e8321256b7fb3aa06b32484375d28a94b4cbacc034abd9aac03e7bf93f6263f52fb6cd7a11edb3e8dabb22b3bc6ff8d33c384b238c42fbd72cce9c18bda5bc7928ffc0c2f9e3455bb52626b937aaacf43ecf123aec3a808ac6a29ca517ec7790ad4087d68a7e8caee42e517c63f13147aa5e3bdec7fbbf42a3a7b4ba72c45efc6fb9aaf85946dbdab9fa3901e6a69cb135c4ef17aadda5b1dc833b18ef56cef71da8e400f5d9ffc75c7e78b32ec70154f61a4c5f5599353936c4dd034f53008c1fa0442cab459ef7247f86d2f29264d3fdfbbc0ccee57a0442cb6b86f87be4465a8ffd3e491884acce02ad2c6a250a1fa2844d195a39967d8dc5dc1b9673bcdc5aef525914ddc8b8a006c68c7a907cb78ff82f485e01c52fc2427d665762b3239f0024ad7e6fac031c0a4aaa918d0ae450f930689d3511d0602a9a84ae056c931b30e553c52de95edc21180e92b761011e8792dd00b58425c87610de54da6f8137de9ccc2f6f19bbc56868b6b9f0dda5396029401f3803ff7e131273f8e81672d11952e631b8097f28b3604a26ecdccc1ec8ee547a4089cfb7211da278694784e29e5e17f1a0289dfe9c24f7afe26b3bf4f071f160ced24d047cf025f92f878cf0c23b052357eb750d05dd2ea50027dac936ab31a7de2c9551dd9f2559bb470ec0635f977c5077f853a3ff6ae4326e968b44f02f157b26ad4cf6271aaa5779e42920472919315c8a3bee62aaeab9c11cec3e71dc1ccaf52f5f5f47e88062c2d3005ac33ad2d5a5d3947d4a0a711a8c2c36876535f0599b160f2bfa77bc8abe2d695e60a2d9f0fb39e1f9d51d7c1c0a9e29ef9dfede1cd5a713a99768c867ea593320ee4ac83b65ef6810c986a0ef6f145cd49ed167f909e9ea3151a8192df5fd6bf6da3b3dc310eeaa90c6dee3e1cb42bb2c4cdf393d9f363db4cc2defd36605bbdf9bd837bfac3ee5ddda454d156d765404d93a42823aef309b313ce42773187c8cc70c6ffd7db66b65e954273a6731eb3ca0f2f0d2aa8f2cb1c05fe2f3fc8784643f048873a8e68f9aef75dbe66c7cd3bf8afa651212547b9ebceec1b3397c4f7f45f6091532731bc5b945d1bbac7ffe758f9cb25e7a935f18e1a20dfb45d0bd206b1d21abb219aee6223a8af536b0decc6782205cd9f89f0ff432766550e6ac23b5be4e74f65928bc4864acc6aa60a1a677baec607e78ffbe157b8128f8657d8c38b2cc96c585adda260209352f6a4162794c5c9d6b3831d57720f954030e2471821d31040c25e434dbf325240246e6ac5f77704fa38109452574d44074e673a070120d128c6b6755c36ed550e4848d5eac9c9dbbe574a4f6ac2f1fbca69544e0c0f8a96c3df047a941fb3db1ccac7895dce63473ecebd98dd9d24c3dad484b3e12e2bb0a41c3329cfbe74ccfb00b4062b8a945024350179d3d57ef137b5f1b21c77caa8da000e0a0965cc12cef2e6cb170a6c4db5246e00beba2756938ad42297aa2f4add377a93c3796b225c60f17685202eb5e3103f73e1b7bf5c1f407242e53d3e2a8452d9c9e6ae874d4fbdc2bac52db297512435f5fc6f2bc26aac380e8df90fc38eaaa57625900355245d493ef58457dc1b624d4e5b2b674cc183fc5049d5c11f2710fa57befe83b7570398599b78266dc1a1b41eeac888de3416ba5574f29786b89858aee529180eedeaec6119f4e2ee2b99004febe8bc6bfaa17a57b9974d7f39b4d856e7d4d0e8ed10379e3b238f1b3461821a9416b1923af38a352d10aa95562978c905ccdc417806864980d4c204a408f880ebadbcab2c57beadc4af068e141392de1e27a7d4c89cf63e46c09fed56ce0ac21dd7a8444455bab33bde0a44291cdacd96012dcdc9b23d9f32c7b859f3d0039698c2a8aaead4a73466cda868434c09ed6b3e762624ec7b6af28c8f5f4fcc0bc597d2c9bbe413b5b61a25be06be83e0918a5a8ae68969939007591ef76dc49c3491456fb7b22f2f4fefc79f12feb650b07203dabbb8ce6fc3c96cda8ebeb100f99be564d8c5c2c6d4b4805f76d3542c79a53594f2843e3122d122b89e6d479339059e3ca79445c3b0ec46bd4f468676a3b00c7c0f629fb7a2eb7e612332bcd22fc9f76a1118d0584fbf0f33cfdd92a5d0d9c768f2b7a95d4f2da414a5cd66bdca205310e48fdf408e4aa1a5eacb5a7d54b6d802caf3752ca9778d8ac4e55f62fda11022713e1deb034ed05662cd5b499ee1d1b2c50f0cdf17819f254813e6b4b86bbbc508a24e651fcd5d775d7627f9d2550d8fa4ab9fdad3befb1ecc9e44c6dcc3ea2faedc159f98e2bc356a605ed6152a64e597aecbdfcdc18673742a2d849f4bb1b01e715d8c2a3b36a4fb2fe7575fadfc68cb18a3a6b4701e7c83223d2931683160fafb2a11550108965ee1987be7a72233b496887c8c026717b19a094929e8d1f7ff9ebd4cbf1be0e6474913beb9c908f36004de83b8354422d9b194d4d2cf17583e925ff00177ad9e89342c14902e4caec215b129f3c7e67cf57192b1909961a69c0972fed242c42bcd3d2615a3f43961fece7c405a822c8fd184cba9693d7344fd6c6ecce641c40dc479beb64ad272f8108275bb2726ddeb8ac44f75deb49263ecb899410d282c347b728cb0ba8447fd3d0f2997e6f38f621b656fa7e58011b8bbfc6a4d9f82c48933df3123e4046abff84bd254e55881a98c386a20f4ecd3a92aed697e1babcbcb9c9005fb1ba1797f79d0aefcbef1f39097cb327df02156a7539fc0d80d821887c0cf2c2b9570de5784e7779503e29068e62aed5d13ba71dd18c74c3f96b1c16dd6357b9ad38372b78068314e54183ad8530be5474fff39c0a690342e7380d456208f024447d6a9d2100d0122b96d513b5c3a3426af7693247484db86dd73275c50499d0c56c52e532ada3a95cff4fb629915d05f1a4231e1f643922d2da0407bd557fb6f5975b982a79c2310b765a3e840814bee7f413c8311e0dac57b365aadc91d69204fa51c851b9516e96eb23dd102e22f56d00d952b8d1d4fb7e187997a2d75e3c45ebe83dbab312913c42d0d886f92422ec5f527dcfd1636d5a3b6afe477e7820801c59e98b936cc8100bad014de8345bd66d7668221c735ceca1c695006bec505d3feb0fb52f27a939608a1e525059608ee7f9f8d339a860f77c017fac84401028877a0088ce4a719001d24359804ba1ae684339129def55c898bbd36073a6344f54b6704d94a36e99e92fd57795eb934ac7936a4ce3b1e5724c204b01d", 0x1000}], 0x1, &(0x7f0000005640)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x780}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x90}}], 0x5, 0x20000000) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./bus\x00') removexattr(&(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:27 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x9]}}}}]}, 0x48}}, 0x0) 03:07:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x18]}}}}]}, 0x48}}, 0x0) 03:07:27 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa00}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:27 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240), 0x0, 0x10000}], 0x0, 0x0) 03:07:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:27 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/6) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) write$cgroup_type(r1, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0xffffffff) syz_mount_image$bfs(&(0x7f0000000280)='bfs\x00', &(0x7f00000002c0)='./bus\x00', 0x7, 0x6, &(0x7f0000000700)=[{&(0x7f0000000300)="bb5f03ad61d8dbb44d7c1c540239b854664cf2baa49922436bb619be27a6894fa48bd1bb8b46d02239b42aeadb0a52c8d63fafc30f063c971949b2610f72f3664a67df3d9623377c12eb882d4e91f4228962e3dd211a023bcb37c8e4aa30ae74a3e844df0416294693d9a0606651934452b0ef65837448e741b4be0399bc6824bee7047694c82263dd2795761fdf8812167ceb65d78c378b4a7a89ecc3fa6979c3bb54a91d6b2ab574f7707a534d1cc7cf3dbbfe1738384d94572e6a5712e7ad06da194321673ce68be6fef22fb6c1030dd7d961c0e0", 0xd6, 0x8}, {&(0x7f0000000440)="9a3ac4690abf629d21d0034723e302670786ee7034343cae0fdc922218dde18cb63b67ba8df3da00c276637c95e1c6440c5a66ad22e1257497a6a6d0b7cd2312c73f8b52174845ac1e2db94c0d9b3fc3bdae77ce44180555125647e251aff32fdc0cda4076483ba7b6203db43e7f4a66c98dd9ea7ef8081c8b80c008cf218f68b2d6e96df066bd275803a0cdc98e424264645aedda8d131a236e4d08978abd551c6d6216fcf7aa6383dcd12ccc8eb65c2c835c4c7b14f65fbcc2d314b7694222f269b2354c0ed13a9fd799fd0e95b656efc8a8ea91b369b0aa91b11a78248de7e8283993c03c54c12106c5af47a74dc6260ba15e5293a8d1b550", 0xfa, 0x66a3}, {&(0x7f0000000540)="6bd36b1f8a3b4dbbc7d4a519e73b956b8b077c9b31258c81f5e530b09587255e6b93af806cd913c45286a8ea16f9fbe318442d789c1f906ce16831770b9c1381c6726fd3b368004f3b83997872c67009844002ec384314dee26096ec38bbd00cdcf00b457ebe404cf6e32694d2fb3561403e300a78e40a9dff46e765", 0x7c, 0x1f}, {&(0x7f00000005c0)="ce3d242424c920073d3660aa0b574a9c6e57e787b6e8cbb309e6be951859ea45a802338265c8a7e544a2c6bf07b19f1af61ade2e9d285093cec42bb8aa1a9638", 0x40}, {&(0x7f0000000600)="15f214192a30eb3cdba3d1c5f23fe604646b912e70b87f", 0x17, 0x6}, {&(0x7f0000000640)="de7b2d7be98326bfc90908477a6e4b40092f4bca8863c92771f3192d8fafdf10eca338a089f8e24360a2aad5b6d6a88ace0e92aaf6e915a873a650a61dfdfc48324c7864c4e15c83cbe8cd0130422eaa988f971dd315273aac695e27058e5e101ff27b1974ece28653711258c4d5fc361dd33cdbd02f6c2262d2f08067f7e04a681cdaa8f005498a00e8d7", 0x8b, 0x6}], 0x20000, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61707072616973652c005ccef9b9b14bb98e8d94e82c33dd0a0e28f7d34b0a6f93fa095ea9390d176bfff91f4d01d102814719fd0f54883ad1012e488d0137ed375e73d2a8c65d60bd94288b515277d9a92cef4c866a33ff42add4a3914a5e1cc25a7e84b676650000000000"]) mount(&(0x7f00000007c0)=ANY=[@ANYBLOB="2f646576326ef56d603000"], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='aio\x00', 0x2000, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 03:07:28 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b", 0x5f, 0x10000}], 0x0, 0x0) 03:07:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0xa]}}}}]}, 0x48}}, 0x0) 03:07:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x60]}}}}]}, 0x48}}, 0x0) 03:07:28 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b", 0x5f, 0x10000}], 0x0, 0x0) [ 631.295822][T13619] overlayfs: unrecognized mount option "appraise" or missing value 03:07:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xb00}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 631.355214][T13627] overlayfs: unrecognized mount option "appraise" or missing value 03:07:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:28 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = fspick(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', 0x1) fsmount(r2, 0x0, 0x4) recvmsg(r1, &(0x7f00000001c0)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/87, 0x57}, {&(0x7f0000000440)=""/176, 0xb0}], 0x2, &(0x7f0000000500)=""/4096, 0x1000}, 0xd436cdacea59fd8a) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065576469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65301ab0a618b6294ed8793d6f6e2c00"]) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x40020a) memfd_create(&(0x7f00000000c0)='Yem1ywlan0,em0\x00', 0x2) write$cgroup_int(r3, &(0x7f0000000080), 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) 03:07:28 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b", 0x5f, 0x10000}], 0x0, 0x0) 03:07:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0xb]}}}}]}, 0x48}}, 0x0) [ 631.595060][T13656] overlayfs: unrecognized mount option "uppeWdir=./file1" or missing value 03:07:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2}}}]}, 0x48}}, 0x0) [ 631.662738][T13664] overlayfs: unrecognized mount option "uppeWdir=./file1" or missing value 03:07:28 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b52", 0x8f, 0x10000}], 0x0, 0x0) 03:07:28 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:28 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0xc]}}}}]}, 0x48}}, 0x0) 03:07:28 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b52", 0x8f, 0x10000}], 0x0, 0x0) [ 631.933721][T13685] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x2]}}}}]}, 0x48}}, 0x0) 03:07:28 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000040)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x2e8adb60c30be451, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000040)={r5, 0x0, 0x10}, &(0x7f00000000c0)=0x18) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) ptrace$setregs(0xd, r6, 0xd286, &(0x7f0000000380)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r5, 0xf8, "48fcd28c3850310565bcd63a822cc1c20028feccb3cfd4eb2750003a63b708bfa965d29847b91876d810a396aedd47d0ba9bec0e23b0aa0e6bc0e10e08f8dc0a7b384a0eb3c3f65527f15918b0ea9c2034eacc3d3a9cdfe433e5ab966292b5072cced0ba8b7e68cc0137726a7a8009ba1d6ff5b835f398e203a0b1400ff6fe1ccf18850abec90e5e40ec889c7a1f04b912d480f964564e20e37fc4916fa5b7ea284ffb5eff8d9021228740d5facbb20031c1365faea6d275eaf6ca96845bf5f0b18044307976153b6868e7034f9c1c3bde7f7fb918c9a7812805eb545493e6cc568e37393557416646ee08dc3b1f552b68b2b23e82c3b239"}, &(0x7f0000000300)=0x100) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='\x01\x00\x00\xde\xff\xff\xef\x00', 0x2000088, &(0x7f00000001c0)=ANY=[@ANYBLOB="8d29b55a1440ecad39fefbb70210c87206f0c27dbbc720b6e789476343d9fc5b53ef9f6e82b7ad4262ab069da881f39ba0ce187ac570394e5f99cd4f599326b767e0392051ec3318133bdb6ffc9a7b99c2169a6ae805"]) [ 632.150607][T13692] validate_nla: 38 callbacks suppressed [ 632.150612][T13692] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 632.164797][T13692] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:29 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b52", 0x8f, 0x10000}], 0x0, 0x0) 03:07:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x3]}}}}]}, 0x48}}, 0x0) 03:07:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0xf]}}}}]}, 0x48}}, 0x0) 03:07:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xf00}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 632.303466][T13718] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 632.321196][T13718] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:29 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e3889", 0xa7, 0x10000}], 0x0, 0x0) [ 632.557551][T13738] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 632.572385][T13738] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x4]}}}}]}, 0x48}}, 0x0) 03:07:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x10]}}}}]}, 0x48}}, 0x0) [ 632.606262][T13738] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 03:07:29 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e3889", 0xa7, 0x10000}], 0x0, 0x0) [ 632.679945][T13738] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:29 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xa502, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:07:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:29 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e3889", 0xa7, 0x10000}], 0x0, 0x0) 03:07:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x11]}}}}]}, 0x48}}, 0x0) 03:07:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x5]}}}}]}, 0x48}}, 0x0) 03:07:29 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1200}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 633.023741][T13783] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 633.041695][T13783] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:30 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c36673", 0xb3, 0x10000}], 0x0, 0x0) 03:07:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x6]}}}}]}, 0x48}}, 0x0) 03:07:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x12]}}}}]}, 0x48}}, 0x0) [ 633.215377][T13791] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:30 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7570706572646972fd2e2f66696c65312c6ccc21d72bbc1df537a84dc2fca959d8ef6f77000000000000adca7450e502311d7625c0"]) 03:07:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1300}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:30 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c36673", 0xb3, 0x10000}], 0x0, 0x0) [ 633.351199][ C1] net_ratelimit: 16 callbacks suppressed [ 633.351205][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 633.356950][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 633.431268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 633.437073][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 633.511202][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 633.517084][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 633.538881][T13830] overlayfs: unrecognized mount option "upperdirý./file1" or missing value 03:07:30 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c36673", 0xb3, 0x10000}], 0x0, 0x0) 03:07:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x8]}}}}]}, 0x48}}, 0x0) 03:07:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x13]}}}}]}, 0x48}}, 0x0) 03:07:30 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x160) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:30 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1400}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:30 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) getpeername(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000300)=0xa0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f000000726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c00d65eabd257a0a9f988e607453a1cc23e281212eb12b38cfb18c032"]) 03:07:30 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b0", 0xb9, 0x10000}], 0x0, 0x0) [ 633.834889][T13857] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 633.911209][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 633.917097][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:30 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x14]}}}}]}, 0x48}}, 0x0) 03:07:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x9]}}}}]}, 0x48}}, 0x0) 03:07:30 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b0", 0xb9, 0x10000}], 0x0, 0x0) [ 634.043197][T13873] overlayfs: unrecognized mount option "" or missing value [ 634.071194][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 634.077035][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 634.110788][T13881] overlayfs: unrecognized mount option "" or missing value 03:07:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:31 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200400, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0xa4) 03:07:31 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b0", 0xb9, 0x10000}], 0x0, 0x0) 03:07:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x18]}}}}]}, 0x48}}, 0x0) 03:07:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0xa]}}}}]}, 0x48}}, 0x0) 03:07:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3080}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:31 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d", 0xbc, 0x10000}], 0x0, 0x0) [ 634.444379][T13912] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:31 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x202040) statx(r0, &(0x7f0000000080)='./bus\x00', 0x4000, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x60]}}}}]}, 0x48}}, 0x0) 03:07:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0xb]}}}}]}, 0x48}}, 0x0) 03:07:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:31 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d", 0xbc, 0x10000}], 0x0, 0x0) 03:07:31 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4}}}]}, 0x48}}, 0x0) 03:07:31 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:31 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d", 0xbc, 0x10000}], 0x0, 0x0) 03:07:31 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xe0100, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000002c0)={{0x10000, 0x100000, 0xd, 0x3, 0x7, 0x3, 0x3, 0x9, 0x7a, 0x80, 0x7f, 0x3}, {0x4, 0x3000, 0xe, 0x9, 0x5, 0xfe, 0x18, 0x8, 0x2, 0x6, 0x8, 0x3}, {0x106000, 0x2, 0xe, 0x6, 0x6, 0x1, 0x1, 0x1f, 0x29, 0x6, 0x8, 0x1f}, {0x1000, 0x3000, 0x9, 0x3f, 0x1c, 0x80, 0x81, 0x0, 0x0, 0x8, 0x80, 0x1}, {0x0, 0x4005, 0x0, 0x48, 0x12, 0x3, 0x7a, 0x8, 0x7, 0x7f, 0x1, 0x6}, {0x3000, 0x5000, 0xa, 0x63, 0xb6, 0x8, 0xf9, 0x0, 0x0, 0x80, 0x8, 0x1}, {0x0, 0xab72bddfbff04742, 0x17, 0x4, 0x1, 0x5, 0x40, 0xca, 0x80, 0x5, 0xfc, 0x80}, {0x4, 0x100000, 0x9, 0x3, 0x97, 0x2, 0x7f, 0x9, 0x4d, 0x1, 0x0, 0x3}, {0xd9a0d41617ffdded, 0x4000}, {0x0, 0x200000}, 0x40000008, 0x0, 0x1000, 0x440, 0xd, 0xa001, 0x1, [0x9, 0x8, 0x4, 0x8]}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0xc]}}}}]}, 0x48}}, 0x0) 03:07:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x19}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:31 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d71", 0xbd, 0x10000}], 0x0, 0x0) 03:07:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x2]}}}}]}, 0x48}}, 0x0) 03:07:32 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L+', 0x10000}, 0x28, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2e6275732c776f726b6469722c6d657461636f70793d6f6e2c00422bfbdb8aec1420715a9329132b2fca9eecbb1338a6d7c89e48dc8e5a7ad40000000000000000"]) 03:07:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 635.244737][T13992] overlayfs: unrecognized mount option "workdir" or missing value 03:07:32 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d71", 0xbd, 0x10000}], 0x0, 0x0) 03:07:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 635.285041][T13997] overlayfs: unrecognized mount option "workdir" or missing value 03:07:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0xf]}}}}]}, 0x48}}, 0x0) 03:07:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4788}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x3]}}}}]}, 0x48}}, 0x0) 03:07:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0x0, @remote, 0xffffffff}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="6cba14aa92d9914ae830c8519f67a332cad68ebf8af0b723347b9583dcd8a2e89855ac88cf95b44cc6caf456caab8555e80bd779cf487cfe41ff146d6686039db1076fdb25c14434e9465701c61d63e93d1acfacb9fae56a246156b8a6fe6d5aab619a7df5a2c822fb93e4dc1b582ddfd81ba081c72c2991c7f82b777faf20858d6780474cf44f13636c134c8a6ccf3e45e50c61e1c6eb20b5c5e5be0c527efefb58773083805a8a3c1808da55bad38be618ec1e6ffc198ed0e2891ddd0c720d517c7070d3f78274bf36a2e429f99bbd9c7109f96d013209530ea6a70238c8e9ba26fff0fa6119deeca30c703742", 0xee}, {&(0x7f00000001c0)="9de98706462295e6eba2a7e10d1eab90f718338c7b4d0f6ebcaed1ee1ca6b15ce4cf9a97662dbd868ac8910f34e011dbe6e4aa298adfbf4bc42060186578829fe82b74d3550b936775089a612f6f151041e99597936e7b552ff9", 0x5a}], 0x2, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff8a29}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18}}], 0x78}, 0x40) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f667a698a7d53da696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70"]) 03:07:32 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d71", 0xbd, 0x10000}], 0x0, 0x0) 03:07:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:32 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x1) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x2) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xc9, 0x401}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./|il\x001Mlowerdkdir=./file0:metacopy=on,\x00']) [ 635.552807][T14020] overlayfs: unrecognized mount option "metacop" or missing value [ 635.666814][T14036] overlayfs: missing 'lowerdir' 03:07:32 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe}], 0x0, 0x0) 03:07:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 635.697001][T14036] overlayfs: missing 'lowerdir' 03:07:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x10]}}}}]}, 0x48}}, 0x0) 03:07:32 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_auto='xino=auto'}, {@metacopy_on='metacopy=on'}]}) 03:07:32 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4888}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x4]}}}}]}, 0x48}}, 0x0) [ 635.857652][T14052] overlayfs: missing 'workdir' 03:07:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:32 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe}], 0x0, 0x0) 03:07:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x5]}}}}]}, 0x48}}, 0x0) 03:07:32 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000200)='./bus\x00', 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) write$cgroup_type(r1, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, [], [{0x1, 0x4, 0xfffffffffffffffd, 0x1, 0x4, 0x5}, {0x3f, 0x2, 0x9, 0x8001, 0x6, 0x8001}], [[], []]}) fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000400)='net/psched\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}]}) 03:07:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x11]}}}}]}, 0x48}}, 0x0) 03:07:33 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe}], 0x0, 0x0) 03:07:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:33 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) finit_module(0xffffffffffffffff, 0x0, 0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c0000000000611350000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf2500000000000063350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad320100000000009500000000000000050000000000a1009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) fdatasync(0xffffffffffffffff) socket(0x2, 0x0, 0x9) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000016c0)) fdatasync(0xffffffffffffffff) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000400), 0x4) r3 = socket$inet6(0xa, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f00000005c0)=""/4096) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_read_part_table(0xfffbfffd, 0x5, &(0x7f0000000540)=[{&(0x7f0000000080)="68375768db33b4c0abba9cd1aa08d0d17daf893dcd045d5dc67a40d04eafb555a4fc464143f391fcae4ba717419c7d92d0a6b6241e8834b443a667376f2f4849683ee6348a405e03587e439a3b1e6a5351ca3d23c890a35e5eb107fb2354e6302d", 0x61, 0x7}, {&(0x7f0000000140)="66895b67af946dfbbd97b6ea6f1a61eb3eeb30bcc16291fcdfa02d1ac8edfadb504959f8f35d3a779574493e1d9c2755175254e880d3e234239675528d06de6a85c276a604706461c0", 0x41a, 0xeb3}, {&(0x7f0000001940)="34f313e110b71ab3b5951aa5290b49e890cdfe596e856a5d3965a70324c8662c0e3a7fa6e7c511080e4de0bd9421235be6e91e7b2b282bfebbc3c9c241ba9b4c5d0abf75fcae80c1e5e97700937dc5888d0e5e34269bfe53e69b9d16265de6cfd4668c4bb40b3aa10c181a9d72f1908de7b923dce24287ed3bafc42763083f247e03d4eb174f00435bbe89098b41f8a09c7b4e1ecd52a4de9961a7c31bd6e11f9713d8bbf7f43d390e44f2879b0d18a92b6cbc46f6ca66800af4f3d220aeaa320db685debb549d74158e902e6128766f8f4263824b6200"/230, 0xe6, 0x4}, {&(0x7f0000001740)="962829b6fa3aa7cbe7512ced87fd3c4ade179989373c7aa71683c5c2a963669c2fbe0918687b04fed536f8e7877ea38d36ad028c0a195e305c1d2f1061214b06b7ef0bd2ec693755fe8e37e7e542f259af02ab631a4368e084f3877973164c614a5549de22505f0b8a9a6fcec445c6fbe34650", 0x73, 0x80000000}, {&(0x7f0000000300)="fec44af6fcdbb9bf182d771a68d5bb4566664cfd166779e6929eb4bb1d0a7fe4093c39221e471cda4f226783f58764dfa1db56949f8d65527b7735534ea6681f8e724ab445ddc94aa54b1f9c7ddce1ab9dbf048a9616b26d47c82e5ff43b7e7c02d5ef35e6b530ebc8e94f169c808a9e9228a716c616e2a23cfecf46f93bd2fe55ed9486e06c11abadacb6d3159f427f09d4ad49249d234c0ae06ad43cfddfa1bb", 0xa1, 0x2}]) fchdir(r4) write$binfmt_elf32(r4, &(0x7f0000001a80)=ANY=[@ANYBLOB="7f454c4640800901000000800000009400000600080000002203000003000000b700000005000000e30a2000010002000900ff7f0000000002000000fbffffff030000002000000007000000030000000900000000f0ffff010000000200000000001400d76d543508000000070000000700000001000000c3b120d0040db189cea9e9530a83b8be0a4fa5885fc26c47ddf9c37b2a58bed4e773c840674d252536496f2510eb894130f2314d4c4010d66211b9d4e9b22d95773470366b7391d71390380942b4c385d350844eb37e01d3313387f01cc57edd34d2e889e80ca2b8a37a4c60d7ee98c4b327bca4039326a5a5de2fb8ae16c925ded6f4119c1be0880734594a6559ca5b7bb853839e089bad92c445a0968decef0ddf5c4ffb4fc88bbf89d721a10f0c604d1729addfd67dd3ef43c6eacfb4c981a3594e3160a375e958aae491de3bc8f8f7cd8c74faba3edc8820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6013ec790db176000000000000000000000000000000000000c4edc3ad781b25a9afd37fa52820734d66915cc7089631893cf2036017263d4f05e86a6fd245ccd61e476f54054193e1c44801e9125c29e9f43fbe143c2c71e3092623fa6e20714d6304281a74b0b00ec9dde71bc542adcc7ef3c7be70c07b00e6870ba53e813518da1760deae60c1c43010ce1d6eac0d7633382821b4d4a353522128a06f15b03499102cd6f63993ee7d59e00d2e"], 0x24c) semget(0x3, 0x0, 0x9058d5b8e64f5eb6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x4, 0x1}, 0x10) semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f00000015c0)=""/254) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="02c08cb5c6ef098029ef8370403d2fc8b9eac24eb067882a78047503c7a21e04d3026e17d032f1cee9359359bcf6d26d5a67471afe0aa0c8513740e49fb20cc194", 0x41, 0x4, &(0x7f0000001700)={0xa, 0x0, 0x2, @empty, 0x100}, 0x1c) 03:07:33 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40020a) getpeername$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000480)=0x1c) write$cgroup_int(r0, &(0x7f0000000080), 0x12) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x101000, 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='9p\x00', 0x21001, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_any='access=any'}, {@access_client='access=client'}, {@cache_loose='cache=loose'}, {@access_any='access=any'}, {@cachetag={'cachetag'}}, {@posixacl='posixacl'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'overlay\x00'}}, {@measure='measure'}]}}) mkdir(&(0x7f0000000140)='./file1\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065720069723d2e3866696c65312c6c6f7765726469723d2e732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c00c984b70bbb5ad5e930a403311850adb63fd7f857da6bbb15afa5ce7579a1c548ff632eafe10ac8c1ca3d"]) 03:07:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x6]}}}}]}, 0x48}}, 0x0) 03:07:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x12]}}}}]}, 0x48}}, 0x0) 03:07:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:33 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c0081b9327a7b7f35a23cc999365d670b6452fb9c2aba18a7448571b96667bdcdb4c22ed7dc656f146b6e5420b9de6840a16d83e17d07cfeb1428288be1aac15f21d323122dde80a74e67d66228c8b0003e1feee63864a111aa8e05f23c1103d55b4a853f7808c671160ead6b5091cbd1756ae8b1"]) 03:07:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x13]}}}}]}, 0x48}}, 0x0) 03:07:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x8]}}}}]}, 0x48}}, 0x0) 03:07:33 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6558}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x1, 0x4, 0x100000001, 0x0, r0}, 0x3c) clone(0x800000000b000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000002c0)}, 0x10) 03:07:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:33 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) sync() close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="63ff0000ac3337d5ac09dc34c024c602b67b49658f73347fcaaccd984068be8f96f52a15bef2e041cbc4bc1f91d6c5a51d74322675f503eb3879ee3cfb64dca625461b96cc09bfbd501c2e27c0ef8c31fc88b37296f8d896e165100b3d8091438e456fffe524b73c4e76c7f1d25754394153d5e1bee603c78711d38f432a961a221b0ed4a9e99043f4992e8651068c810f9287c7744b1d4fe46f6f2175865c0bda2250f25ee02f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r3, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e22, 0x4, @mcast2, 0xfffffffe}}, [0x20000, 0x6, 0xfff, 0x5, 0x3f, 0x7fff, 0x9, 0xfffffffffffffff9, 0x3, 0xff, 0x8, 0x2, 0x1, 0x8, 0xe96]}, &(0x7f00000001c0)=0x100) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='up)\t\x00\x00\x00\x00\x00\x00/file1,lowerdir=./bus\aworkdir=./file0,metacopy=on,\x00']) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) 03:07:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000), 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f3ff95000000000000001739f486a0ef063f58e57c4f3c167972fc5489a4ef75c6020d447d9d007970d52bafd9c4365dde7f3bbfcb8129a6ef0ba516b4f002e9e67ef97a9029fd336949c2aba949dc9d0654d6538094d26a9eacb2ae39233f0494a84bee05438afb2c0c71ee6d1639c8a46f7f20171953d40000000000000000054eb821db1a0370fe00b70e35b249bdca000c81d6ddd903a3083400000000000000efd6db785a47d339a45dae029255e099e0d9feb89b47eba6b431c72470befe2bc44ed29619c39eb01cc83425c43c28355c24c9ff18a3d414409774fc3f7ccb62cc3e06dda03f36b868"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="b7", 0x2}], 0x1, 0x0, 0x0, 0x3}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)='Z', 0x8d7fa}], 0x1}}], 0x15, 0x0) 03:07:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3e7}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8100}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x9]}}}}]}, 0x48}}, 0x0) [ 637.107333][T14186] overlayfs: unrecognized mount option "up) " or missing value 03:07:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x14]}}}}]}, 0x48}}, 0x0) 03:07:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 637.273531][T14197] validate_nla: 42 callbacks suppressed [ 637.273537][T14197] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 637.291261][T14197] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8847}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0xa]}}}}]}, 0x48}}, 0x0) 03:07:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x18]}}}}]}, 0x48}}, 0x0) [ 637.358410][T14208] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 637.398499][T14208] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 637.542125][T14221] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 637.554172][T14221] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:34 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40020a) write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000002c0)={0x7, 0x0, [{0x4, 0x4, 0x0, 0x0, @msi={0x7, 0x3, 0x36}}, {0x0, 0x2, 0x0, 0x0, @irqchip={0x0, 0x5}}, {0x7fff, 0x4, 0x0, 0x0, @irqchip={0xfffffffe, 0x1}}, {0x4, 0x3, 0x0, 0x0, @sint={0x7, 0x7}}, {0xfff, 0x0, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x813, 0x5, 0x7fff, 0x1ff}}, {0x2, 0x1, 0x0, 0x0, @msi={0x1f, 0x0, 0x2}}, {0x1, 0x3, 0x0, 0x0, @msi={0x80, 0xffffffff, 0xcff8}}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mount$overlay(0x400000, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='\x01\x00\x00\x00\x00\x00\x00\x00=on'}]}) 03:07:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [0x0, 0x0, 0x60]}}}}]}, 0x48}}, 0x0) 03:07:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0xb]}}}}]}, 0x48}}, 0x0) 03:07:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:34 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) [ 637.795140][T14230] overlayfs: unrecognized mount option "up) " or missing value [ 637.933763][T14237] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 637.942123][T14237] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x803}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0xc]}}}}]}, 0x48}}, 0x0) 03:07:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\t\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5]}, 0x45c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x3, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x2000020) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000600)={0x2, r1}) 03:07:34 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:system_map_t:s0\x00', 0x22, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000001c0)=0x7) fchdir(r0) 03:07:34 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x34000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 638.058154][T14254] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 03:07:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2}}}]}, 0x48}}, 0x0) [ 638.125653][T14254] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:35 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80006, 0x0) write$uinput_user_dev(r0, &(0x7f0000000140)={'\x04yz0\x05\xf0\x00\x00\x00\x80\xff\xff\xff\t\x00\x00\xfe\xff\xff\xff\x00\x00\x00\x00\x05\xbf\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5]}, 0x45c) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x3, 0x4) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x2000020) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000600)={0x2, r1}) 03:07:35 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGRS485(r0, 0x542e, 0x0) [ 638.313931][T14273] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [{@obj_user={'obj_user', 0x3d, 'workdir'}}, {@measure='measure'}, {@smackfsroot={'smackfsroot', 0x3d, 'metacopy=on'}}]}) 03:07:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400300}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x2}}}}]}, 0x48}}, 0x0) 03:07:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0xf]}}}}]}, 0x48}}, 0x0) 03:07:35 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) inotify_init() 03:07:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 638.604985][T14307] overlayfs: unrecognized mount option "obj_user=workdir" or missing value [ 638.631206][ C1] net_ratelimit: 24 callbacks suppressed [ 638.631212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 638.642795][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:35 executing program 4: 03:07:35 executing program 4: 03:07:35 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x10]}}}}]}, 0x48}}, 0x0) 03:07:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x3}}}}]}, 0x48}}, 0x0) 03:07:35 executing program 4: 03:07:35 executing program 1: mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = semget(0x1, 0x2, 0x2) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000280)=""/71) semctl$GETVAL(r1, 0x2, 0xc, &(0x7f00000002c0)=""/247) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:35 executing program 4: 03:07:35 executing program 4: 03:07:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 638.986251][T14343] overlayfs: failed to resolve './file1': -2 03:07:35 executing program 4: 03:07:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x11]}}}}]}, 0x48}}, 0x0) 03:07:36 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7570653d626469723d2e2766697765726469723d2e2f6275962c776f726b6469723d2e2f66696c657461636fe5e0702a8fb936"]) [ 639.088317][T14352] overlayfs: failed to resolve './file1': -2 03:07:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:36 executing program 4: 03:07:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x4}}}}]}, 0x48}}, 0x0) [ 639.255828][T14365] overlayfs: unrecognized mount option "upe=bdir=.'fiwerdir=./bu–" or missing value 03:07:36 executing program 4: 03:07:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x12]}}}}]}, 0x48}}, 0x0) 03:07:36 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) chmod(&(0x7f0000000540)='./file0\x00', 0x28) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000140)='./file1\x00', 0x9, 0x2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="7acda7323253d4c7f79805f0944ea0259634c727dd90eac745651820afc94082d327b80772bf6444e2aef9f21ca3c0485b561ef6bfeaeb61fd6d9a1af92d31ea2a78bc29b7dc975e66ec50442735bb8057e56dd4c80e85bb8c0eb90957eac73ec2d5a3fc9bbb6e0bfab41e452e08543aee69458e00d4eb09943168ae0c01fa689e4eea0b2a95a6fc0c6c35e60a8b4b3917c1dd445240c267cdc39317870ba7fc119671b0cfaf856936cd977e2219517eb0b238da98ebcf02ab3b73e8db861899722ffe8a7ed1c9fa4d922ba5294baf03b3f05be7bd99c2e35913eacca785e4aaf32cc031f2bf4aba7e", 0xe9, 0xfffffffffffffffa}, {&(0x7f0000000440)="26b1d501927180e395ecac9c02ffa91ceca8e20af9330a7163345ab98d9d34faaef4018391041fd146085b02290359112c15fbbb39578c30f22e02aee847661b562fdb40ab9d7c963a66c750bcb1b32b3609050c9c94e6a0d17ab8b3cbe5016a3505b62b22cfadf8cf6b91ccae3260229245642060436c1714115ebceed28d90490b680a0a25c090c7f42179b1a8eec1c794c3d5c513", 0x96, 0xfffffffffffffffa}], 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x204, 0x4, 0x8001, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000500)={r3, 0x3}, 0x8) ioctl(0xffffffffffffffff, 0x1000ffd, &(0x7f0000000600)="0000810000800000080500000001b6ee0bfa000085d85f685652121f70") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) r6 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r6, &(0x7f0000009100)={&(0x7f0000008d40)=@hci, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008dc0)=""/22, 0x16}, {&(0x7f0000008e00)=""/83, 0x53}, {0x0, 0x256}, {&(0x7f0000008f40)=""/121, 0x79}], 0x4, &(0x7f0000009000)=""/242, 0xf2}, 0x1) fstat(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)='9p\x00', 0x110210, &(0x7f0000000780)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@debug={'debug', 0x3d, 0x5}}, {@loose='loose'}, {@cache_mmap='cache=mmap'}], [{@obj_user={'obj_user', 0x3d, 'cpuset\b/}'}}, {@dont_hash='dont_hash'}, {@appraise='appraise'}, {@smackfsdef={'smackfsdef', 0x3d, '[//,.trusted)(+cgroup#eth0ppp0'}}, {@appraise='appraise'}, {@appraise='appraise'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r7}}]}}) 03:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:36 executing program 4: [ 639.468019][T14380] overlayfs: missing 'workdir' [ 639.520979][T14388] overlayfs: missing 'workdir' 03:07:36 executing program 4: 03:07:36 executing program 4: 03:07:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x5}}}}]}, 0x48}}, 0x0) [ 639.591211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 639.597031][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 639.671211][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 639.677030][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfbb}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:36 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000012000)={0xe, 0x0, 0x4, 0x0, 0x201, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0xffffffff}, 0x27d) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/138, 0x8a}, {&(0x7f0000000140)=""/64, 0x40}], 0x2, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:36 executing program 4: [ 639.751183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 639.757004][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x13]}}}}]}, 0x48}}, 0x0) 03:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:36 executing program 4: 03:07:36 executing program 4: [ 639.916710][T14423] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x6}}}}]}, 0x48}}, 0x0) 03:07:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:36 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:36 executing program 4: 03:07:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x14]}}}}]}, 0x48}}, 0x0) 03:07:36 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x40020a) write$cgroup_int(r1, &(0x7f0000000080), 0x12) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) connect$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x20, 0x0, 0x1f, 0x5, 0x6, 0x1}, 0x1f}, 0xa) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x2, &(0x7f0000000440)={[{@index_on='index=on'}, {@default_permissions='default_permissions'}, {@redirect_dir={'redirect_dir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0xad, 0x36, 0x65, 0x35, 0x35, 0x39, 0x62, 0x30], 0x2d, [0x64, 0x32, 0x35, 0x66], 0x2d, [0x30, 0x34, 0x32, 0x4bca5b22a02cfa29], 0x2d, [0x62, 0x37, 0x37, 0x36], 0x2d, [0x65, 0x65, 0x31, 0x61, 0x64, 0xe, 0x66, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'lo\x9cwlan0vmnet0ppp0cpuset'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'lowerdir'}}, {@seclabel='seclabel'}, {@euid_lt={'euid<', r4}}, {@subj_type={'subj_type'}}, {@appraise='appraise'}]}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:37 executing program 4: [ 640.151189][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 640.157005][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:37 executing program 4: 03:07:37 executing program 4: 03:07:37 executing program 4: 03:07:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x8}}}}]}, 0x48}}, 0x0) [ 640.343660][T14446] overlayfs: unrecognized mount option "fsuuid=­6e559b0-d25f-042)-b776-ee1adf5" or missing value 03:07:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x18]}}}}]}, 0x48}}, 0x0) 03:07:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1900}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:37 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:37 executing program 4: 03:07:37 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$inet_dccp(0x2, 0x6, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7570706572800000002e2f66696c65312c6c6f20bd27d8b68141e936e1b2ba7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d65"]) 03:07:37 executing program 4: 03:07:37 executing program 4: 03:07:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 640.607677][T14484] overlayfs: unrecognized mount option "upper€" or missing value 03:07:37 executing program 4: 03:07:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x9}}}}]}, 0x48}}, 0x0) [ 640.706458][T14484] overlayfs: unrecognized mount option "upper€" or missing value 03:07:37 executing program 4: 03:07:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [0x0, 0x0, 0x60]}}}}]}, 0x48}}, 0x0) 03:07:37 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x88a00) write$eventfd(r1, &(0x7f0000000080)=0x1, 0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:37 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:37 executing program 4: 03:07:37 executing program 4: 03:07:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 640.988228][T14518] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:37 executing program 4: 03:07:38 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000009100)={&(0x7f0000008d40)=@hci, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008dc0)=""/22, 0x16}, {&(0x7f0000008e00)=""/83, 0x53}, {0x0, 0x256}, {&(0x7f0000008f40)=""/121, 0x79}], 0x4, &(0x7f0000009000)=""/242, 0xf2}, 0x1) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdPr=./file0,metacopy=on,\x00']) 03:07:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4}}}]}, 0x48}}, 0x0) 03:07:38 executing program 4: 03:07:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xa}}}}]}, 0x48}}, 0x0) 03:07:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:38 executing program 4: 03:07:38 executing program 4: 03:07:38 executing program 4: [ 641.357167][T14554] overlayfs: unrecognized mount option "workdPr=./file0" or missing value 03:07:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4788}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xb}}}}]}, 0x48}}, 0x0) 03:07:38 executing program 4: [ 641.418871][T14558] overlayfs: unrecognized mount option "workdPr=./file0" or missing value 03:07:38 executing program 4: 03:07:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x2}}}}]}, 0x48}}, 0x0) 03:07:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xc}}}}]}, 0x48}}, 0x0) 03:07:38 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:38 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000002980)=ANY=[@ANYBLOB="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"]) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000002b80)=ANY=[@ANYBLOB="000000009d00080095000000000000000000000000000000001000000095aa220c260ad5f2337898a1953c93e3b6e34c5e5c9a61413416db8b65058ab03d723ec7fad08960d36f2f11484f"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x5, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0xffffffffffffffd8) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000640)='/proc/capi/capi20ncci\x00', 0x121000, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000580)=0xc) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="0e0001000800000081023400c3c6806754f68a0927025b0cb062e35f74e7d71165ac77f8e246c8107300"/56], 0x40) stat(&(0x7f00000006c0)='./bus\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-monitor\x00', 0x8004, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ion\x00', 0x101800, 0x0) r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') fstat(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x1000000000002, 0x0) r10 = dup2(0xffffffffffffffff, r9) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r11, 0x0) r12 = getpgrp(0x0) sendmsg$netlink(r10, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r12, 0x0, r11}}}], 0x20}, 0x0) fchown(r6, r8, r11) getsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000800)=0x8, &(0x7f0000000840)=0x4) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x55d9d183, 0x5, &(0x7f0000000500)=[{&(0x7f0000000140)="93ca", 0x2, 0x8}, {&(0x7f00000002c0)="879255e4d1645f76f5a1757fe6873010d73c23a028466c58c2d0226c08175012e732270f2562797da9db33281cc9635b4aebc71caf2b6bf2c3013c1f014cb658ff76d1d9f44688833d5d8046916e4d966b1b6fcb8d61c1ccbe89a500ed6a9b15efda518f5e4ab68fbdae01d45c55c5f968d6ed118a56a64bc2b1b8a9253287e19ff31b1740f67387847a625390a182f90fbe0aee1316beabe4febc60cd14a8039315642727bcac02e3dcebf49471c7cb56e76dc0f24b65f3d2901d7aafc7ed00cb77b176ba426b28384911ca31931d8ba862e3fff94950c7a2b393cfb0a94a2c050ec5a2be1cc1a824b5c5c3", 0xec, 0x2}, {&(0x7f00000001c0)="4fbcf6eb2888b5fd9221f1778ba2f7cf9c61bdbd4a3feae5dbeccbd1221e346c62d4de2f5ae5c5f0f6c229deca69cad675bdbc4ca730882021402f874df979f0be774eeae9671bbee2b7624bade00cf32f7592e8c0e9a2c5675bbfad78be91c4e6a45e10226d72714f7c97fa6f11eb03aab0823bb1acf00ac1c322799c7752", 0x29f, 0xc}, {&(0x7f00000003c0)="cf842feecd820166c61b8b4e4027973f0559fc4c19e968113ab6809c059608b4e07111e13dd887ebbdb763ae9aec780529ab02a5d2f17d4dfe2ae2dfc0abd7f0", 0x40, 0x6}, {&(0x7f0000001980)="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", 0x1000, 0xffffffff}], 0x5420, &(0x7f0000000700)=ANY=[@ANYBLOB='skip_balance,compress-force,clear_cache,degraded,subj_type=upperdir,euid>', @ANYRESDEC=r3, @ANYBLOB=',appraise_type.imasig,fsname=,subj_type=metaco0y=on,euid>', @ANYRESDEC=r4, @ANYBLOB="2c6f626a5f726f6c653d7d6264657c4e9581967ed1b26578743d73746166665f752c736d61636b663d6d643573756d6367726f75702c66736e616d653d6d657461636f70793d6f6e2c0000000000"]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xefd, 0x0, &(0x7f0000000a80)="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", 0x0, 0x3}, 0x40) poll(&(0x7f0000000040)=[{r1, 0x2}, {r0, 0xa183a51c36f7241c}], 0x2, 0x9) 03:07:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4888}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:38 executing program 4: 03:07:38 executing program 4: [ 641.763749][T14589] overlayfs: unrecognized mount option "upDrdir=./file1" or missing value 03:07:38 executing program 4: 03:07:38 executing program 4: [ 641.899607][T14589] overlayfs: unrecognized mount option "upDrdir=./file1" or missing value 03:07:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x3}}}}]}, 0x48}}, 0x0) 03:07:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xf}}}}]}, 0x48}}, 0x0) 03:07:38 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x3ff, 0x2, 0x1, {0x77359400}, 0x6, 0xffff5d9a}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400002, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x223, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x660f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffff) 03:07:38 executing program 4: 03:07:39 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:39 executing program 4: 03:07:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:39 executing program 4: 03:07:39 executing program 4: [ 642.314805][T14632] validate_nla: 40 callbacks suppressed [ 642.314810][T14632] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 642.330977][T14638] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 642.356420][T14632] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x10}}}}]}, 0x48}}, 0x0) 03:07:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x4}}}}]}, 0x48}}, 0x0) 03:07:39 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000012000)={0xe, 0x0, 0x4, 0x0, 0x201, 0xffffffffffffffff, 0x0, [], 0x0, r1, 0x0, 0xffffffff}, 0x27d) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xffffffffffff0000) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') ioctl$void(r2, 0xc0045878) 03:07:39 executing program 4: 03:07:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:39 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:39 executing program 4: 03:07:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x11}}}}]}, 0x48}}, 0x0) 03:07:39 executing program 4: 03:07:39 executing program 4: 03:07:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x5}}}}]}, 0x48}}, 0x0) [ 642.735431][T14657] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 642.745222][T14657] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 642.768850][T14672] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:39 executing program 4: 03:07:39 executing program 4: 03:07:39 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40020a) write$cgroup_int(r0, &(0x7f0000000080), 0x12) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0/../file0'}}, {@metacopy_on='metacopy=on'}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0x0) accept4$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x800) 03:07:39 executing program 4: 03:07:39 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:39 executing program 4: [ 643.066252][T14683] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 643.075173][T14683] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:40 executing program 4: 03:07:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x12}}}}]}, 0x48}}, 0x0) 03:07:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 643.107063][T14690] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x6}}}}]}, 0x48}}, 0x0) 03:07:40 executing program 4: 03:07:40 executing program 4: 03:07:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40020a) write$cgroup_int(r0, &(0x7f0000000080), 0x12) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x200000c2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:40 executing program 4: 03:07:40 executing program 4: [ 643.383181][T14710] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 643.396155][T14710] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x13}}}}]}, 0x48}}, 0x0) 03:07:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x8}}}}]}, 0x48}}, 0x0) 03:07:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x40020a) write$cgroup_int(r1, &(0x7f0000000080), 0x12) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000080)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)={[], [{@obj_role={'obj_role', 0x3d, 'overlay\x00'}}, {@measure='measure'}, {@euid_gt={'euid>', r2}}, {@smackfsroot={'smackfsroot', 0x3d, 'upperdir'}}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x40020a) write$cgroup_int(r3, &(0x7f0000000080), 0x12) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0xe3b13b303fb329cb, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 03:07:40 executing program 4: [ 643.522333][T14731] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 03:07:40 executing program 4: [ 643.571334][T14731] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:40 executing program 4: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x2, 0x0, 0x0}) [ 643.690406][T14749] overlayfs: unrecognized mount option "obj_role=overlay" or missing value [ 643.751195][ C1] net_ratelimit: 16 callbacks suppressed [ 643.751201][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 643.762660][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 643.805723][T14749] overlayfs: unrecognized mount option "obj_role=overlay" or missing value [ 643.831206][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 643.837017][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:40 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") setxattr$trusted_overlay_origin(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000280)='\b ', 0x392, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = open(&(0x7f00000002c0)='./bus\x00', 0xc00, 0x40) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x40020a) write$cgroup_int(r2, &(0x7f0000000080), 0x12) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000040)={0x1, 0x40, 0x2, 0x8, 0x6, 0x4, 0x20, "a8924ee00efb6588ea352c2828c733c1a70ab537", "d142fa7ffd656c7abae1cc66f20173cde72cd08b"}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)={[{@xino_off='xino=off'}, {@workdir={'workdir', 0x3d, './file1'}}, {@workdir={'\x00', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [{@hash='hash'}, {@mask={'\x00', 0x3d, 'MAY_APPEND'}}]}) 03:07:40 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) read(r0, &(0x7f0000000500)=""/202, 0xca) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xfffffc79) [ 643.911185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 643.917022][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:40 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x9}}}}]}, 0x48}}, 0x0) 03:07:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x14}}}}]}, 0x48}}, 0x0) 03:07:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8847}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/424]}, 0x220) [ 644.111744][T14789] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 644.127788][T14789] overlayfs: missing 'lowerdir' [ 644.169503][T14796] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 644.184043][T14796] overlayfs: missing 'lowerdir' [ 644.201861][T14794] ebt_limit: overflow, try lower: 1237055799/2886947322 03:07:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xa}}}}]}, 0x48}}, 0x0) 03:07:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x40020a) write$cgroup_int(r2, &(0x7f0000000080), 0x12) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0xb) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x0, 0x1, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @broadcast, 0x0, 0x200000001, 'lblcr\x00'}, 0x2c) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@metacopy_off='metacopy=off'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'work\xe4\x03\x00', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x80480, 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0xfffffffa, 0x3, 0x9}, 0x4, 0x0, 0xffffffff}) [ 644.223485][T14797] ebt_limit: overflow, try lower: 1237055799/2886947322 03:07:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x18}}}}]}, 0x48}}, 0x0) 03:07:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 03:07:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8848}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 644.321203][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 644.327017][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xbb0f}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 644.445197][T14820] overlayfs: unrecognized mount option "workä" or missing value [ 644.472216][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 644.478026][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 644.481871][T14822] overlayfs: unrecognized mount option "workä" or missing value 03:07:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xf51, 0x0, 0x0, 0x0, 0x0, 0xf001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) io_setup(0x80000043, &(0x7f0000002c80)=0x0) io_submit(r1, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x12f}]) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7fff, 0x40000) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000400)=0x9) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0xffffffffffffffe0, 0x5, 0x98}) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) getsockname$netlink(r3, &(0x7f00000003c0), &(0x7f0000000580)=0xc) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x82a40, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000700)="da12ca83574659d96fb22440239a0f19ecc9c14f5941fff56bffb82cfc93f152ae4b2b05f504c80160cd6d1eda028b967a5d2bca9ffb67a6b8732e441715e21e") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x1c, 0x10, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x3f}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f00000006c0)=ANY=[@ANYRES64=r5, @ANYRES32=r5, @ANYRES32], &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\xeb\xff\xff(1\x18\xc7\xc1\xde\xdc(,J\\\xc4hM=\xf4\x04\xd0\xe9\'rT\x8dm\x1a?\x1a\b\x93\x82\xbf\xfe\x83\xcb4tX{$\x9f\xbfHY\x1e;\xd0\xcf\xdb&\x12G\xfd\xd7\xe71\xd8K\x9b\xc9\x04C\xf5$\xd0\x93k\x12u\x9eMM\x03\x00\x00\x00\xc8\x83\x16\x9c2)\xaa\x9fh\xa4\xd2\x0f\x98.\x06t^\xc0\xcd\x95\x81*\xece1\x9e*3\xfa\xb5=\xd2\x1e-\xd3]}\xa7\xbfDZn\xd4\x82\x19\xfb\x1bjE\xc3D\xd8\xd56G\xd9\xc3\x90\xf5\xb9\xdc\x98\xb8\x8f=\xdf\xf0,e\x1dl\xe0\xc5\x80\a\xb1\xad\xbf\xc5\x88!j\xce\x00\x00\x00\x00\x00\x00', 0x4, 0x90, &(0x7f0000000200)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r6 = socket$inet_udplite(0x2, 0x2, 0x88) listen(r6, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) gettid() connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) clone(0x1000000210007fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setreuid(0x0, 0xee00) r8 = geteuid() setreuid(r8, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'sy\xe0'}, &(0x7f00000000c0)='sT\x01', 0xfffffffffffffffc) 03:07:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x60}}}}]}, 0x48}}, 0x0) 03:07:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xb}}}}]}, 0x48}}, 0x0) 03:07:41 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200000, 0x0) linkat(r1, &(0x7f0000000080)='./file1\x00', r2, &(0x7f0000000140)='./file2\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe703}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:41 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0xcbeadedb}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 644.815650][T14851] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x300}}}}]}, 0x48}}, 0x0) 03:07:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xc}}}}]}, 0x48}}, 0x0) 03:07:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x13000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:41 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) setxattr$security_smack_transmute(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1]) 03:07:41 executing program 4 (fault-call:0 fault-nth:0): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 645.055332][T14878] FAULT_INJECTION: forcing a failure. [ 645.055332][T14878] name failslab, interval 1, probability 0, space 0, times 0 [ 645.081318][T14878] CPU: 0 PID: 14878 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 645.089242][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.099298][T14878] Call Trace: [ 645.102596][T14878] dump_stack+0x1d8/0x2f8 [ 645.106946][T14878] should_fail+0x555/0x770 [ 645.111358][T14878] __should_failslab+0x11a/0x160 [ 645.116295][T14878] ? __se_sys_memfd_create+0x10a/0x4b0 [ 645.121748][T14878] should_failslab+0x9/0x20 [ 645.126250][T14878] __kmalloc+0x7a/0x340 [ 645.130414][T14878] __se_sys_memfd_create+0x10a/0x4b0 [ 645.135786][T14878] ? do_syscall_64+0x1d/0x1c0 [ 645.140467][T14878] __x64_sys_memfd_create+0x5b/0x70 [ 645.145665][T14878] do_syscall_64+0xf7/0x1c0 [ 645.150177][T14878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.156089][T14878] RIP: 0033:0x459a59 [ 645.159961][T14878] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.179551][T14878] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 645.187986][T14878] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a59 [ 645.195946][T14878] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be9b7 03:07:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x500}}}}]}, 0x48}}, 0x0) [ 645.205724][T14878] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 645.213680][T14878] R10: 0000000000010000 R11: 0000000000000246 R12: 00007fd89d2b46d4 [ 645.221630][T14878] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 645.232670][T14883] overlayfs: unrecognized mount option "01777777777777777777777" or missing value 03:07:42 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xf}}}}]}, 0x48}}, 0x0) 03:07:42 executing program 4 (fault-call:0 fault-nth:1): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:42 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file2\x00', 0x40) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") rmdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [{@smackfshat={'smackfshat', 0x3d, 'eth1()$lousersecurity%\xe3vmnet0'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) uselib(&(0x7f0000000140)='./file0\x00') 03:07:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffe}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 645.435554][T14899] FAULT_INJECTION: forcing a failure. [ 645.435554][T14899] name failslab, interval 1, probability 0, space 0, times 0 [ 645.491411][T14899] CPU: 0 PID: 14899 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 645.499348][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.509403][T14899] Call Trace: [ 645.512703][T14899] dump_stack+0x1d8/0x2f8 [ 645.517040][T14899] should_fail+0x555/0x770 [ 645.521470][T14899] __should_failslab+0x11a/0x160 [ 645.526413][T14899] ? shmem_alloc_inode+0x1b/0x40 [ 645.531369][T14899] should_failslab+0x9/0x20 [ 645.531382][T14899] kmem_cache_alloc+0x56/0x2e0 [ 645.531394][T14899] ? shmem_match+0x180/0x180 [ 645.531404][T14899] shmem_alloc_inode+0x1b/0x40 [ 645.531412][T14899] ? shmem_match+0x180/0x180 [ 645.531422][T14899] new_inode_pseudo+0x68/0x240 [ 645.531433][T14899] new_inode+0x28/0x1c0 [ 645.531443][T14899] ? __kasan_check_read+0x11/0x20 [ 645.531455][T14899] shmem_get_inode+0x11b/0x700 [ 645.531465][T14899] ? __alloc_fd+0x58f/0x630 [ 645.531478][T14899] __shmem_file_setup+0x129/0x280 [ 645.568792][T14899] shmem_file_setup+0x2f/0x40 03:07:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x173e7}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 645.568805][T14899] __se_sys_memfd_create+0x28e/0x4b0 [ 645.568821][T14899] ? do_syscall_64+0x1d/0x1c0 [ 645.578060][T14899] __x64_sys_memfd_create+0x5b/0x70 [ 645.578076][T14899] do_syscall_64+0xf7/0x1c0 [ 645.578091][T14899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.578102][T14899] RIP: 0033:0x459a59 [ 645.587761][T14899] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:07:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x600}}}}]}, 0x48}}, 0x0) 03:07:42 executing program 4 (fault-call:0 fault-nth:2): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 645.613207][T14899] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 645.613218][T14899] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a59 [ 645.613224][T14899] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 645.613230][T14899] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 645.613236][T14899] R10: 0000000000010000 R11: 0000000000000246 R12: 00007fd89d2b46d4 [ 645.613241][T14899] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:42 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 645.777532][T14921] FAULT_INJECTION: forcing a failure. [ 645.777532][T14921] name failslab, interval 1, probability 0, space 0, times 0 [ 645.826464][T14921] CPU: 1 PID: 14921 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 645.834409][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.834416][T14921] Call Trace: [ 645.834434][T14921] dump_stack+0x1d8/0x2f8 [ 645.834449][T14921] should_fail+0x555/0x770 [ 645.834467][T14921] __should_failslab+0x11a/0x160 [ 645.834482][T14921] ? security_inode_alloc+0x36/0x1e0 [ 645.834493][T14921] should_failslab+0x9/0x20 [ 645.834508][T14921] kmem_cache_alloc+0x56/0x2e0 03:07:42 executing program 4 (fault-call:0 fault-nth:3): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 645.847827][T14921] ? rcu_read_lock_sched_held+0x10b/0x170 [ 645.847843][T14921] security_inode_alloc+0x36/0x1e0 [ 645.847857][T14921] inode_init_always+0x3b5/0x8d0 [ 645.847869][T14921] ? shmem_match+0x180/0x180 [ 645.847880][T14921] new_inode_pseudo+0x7f/0x240 [ 645.847892][T14921] new_inode+0x28/0x1c0 [ 645.847902][T14921] ? __kasan_check_read+0x11/0x20 [ 645.847914][T14921] shmem_get_inode+0x11b/0x700 [ 645.856615][T14921] ? __alloc_fd+0x58f/0x630 [ 645.856633][T14921] __shmem_file_setup+0x129/0x280 [ 645.856648][T14921] shmem_file_setup+0x2f/0x40 [ 645.856661][T14921] __se_sys_memfd_create+0x28e/0x4b0 [ 645.856672][T14921] ? do_syscall_64+0x1d/0x1c0 [ 645.856685][T14921] __x64_sys_memfd_create+0x5b/0x70 [ 645.856695][T14921] do_syscall_64+0xf7/0x1c0 [ 645.856710][T14921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.866882][T14921] RIP: 0033:0x459a59 [ 645.866893][T14921] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.866898][T14921] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 645.866908][T14921] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a59 [ 645.866914][T14921] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 645.866920][T14921] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 645.866926][T14921] R10: 0000000000010000 R11: 0000000000000246 R12: 00007fd89d2b46d4 [ 645.866932][T14921] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 645.928925][T14927] FAULT_INJECTION: forcing a failure. [ 645.928925][T14927] name failslab, interval 1, probability 0, space 0, times 0 [ 645.952973][T14927] CPU: 1 PID: 14927 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 645.979782][T14927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.979788][T14927] Call Trace: [ 645.979806][T14927] dump_stack+0x1d8/0x2f8 [ 645.979820][T14927] should_fail+0x555/0x770 [ 645.979836][T14927] __should_failslab+0x11a/0x160 03:07:42 executing program 4 (fault-call:0 fault-nth:4): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 645.979848][T14927] ? __d_alloc+0x2d/0x6e0 [ 645.979858][T14927] should_failslab+0x9/0x20 [ 645.979867][T14927] kmem_cache_alloc+0x56/0x2e0 [ 645.979883][T14927] __d_alloc+0x2d/0x6e0 [ 645.996238][T14927] ? lockdep_init_map+0x2a/0x680 [ 645.996254][T14927] d_alloc_pseudo+0x1d/0x70 [ 645.996264][T14927] alloc_file_pseudo+0xc3/0x260 [ 645.996283][T14927] __shmem_file_setup+0x1a2/0x280 [ 645.996296][T14927] shmem_file_setup+0x2f/0x40 [ 645.996307][T14927] __se_sys_memfd_create+0x28e/0x4b0 [ 645.996321][T14927] ? do_syscall_64+0x1d/0x1c0 [ 646.012244][T14927] __x64_sys_memfd_create+0x5b/0x70 [ 646.012259][T14927] do_syscall_64+0xf7/0x1c0 [ 646.012275][T14927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.012283][T14927] RIP: 0033:0x459a59 [ 646.012293][T14927] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.012298][T14927] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 646.012312][T14927] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a59 [ 646.028238][T14927] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 646.028244][T14927] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 646.028249][T14927] R10: 0000000000010000 R11: 0000000000000246 R12: 00007fd89d2b46d4 [ 646.028255][T14927] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 646.103881][T14930] FAULT_INJECTION: forcing a failure. [ 646.103881][T14930] name failslab, interval 1, probability 0, space 0, times 0 03:07:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x18000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 646.146284][T14930] CPU: 0 PID: 14930 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 646.167378][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.167384][T14930] Call Trace: [ 646.167402][T14930] dump_stack+0x1d8/0x2f8 [ 646.167414][T14930] should_fail+0x555/0x770 [ 646.167429][T14930] __should_failslab+0x11a/0x160 [ 646.167443][T14930] ? __alloc_file+0x2c/0x390 [ 646.167453][T14930] should_failslab+0x9/0x20 [ 646.167467][T14930] kmem_cache_alloc+0x56/0x2e0 03:07:43 executing program 4 (fault-call:0 fault-nth:5): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 646.199820][T14930] __alloc_file+0x2c/0x390 [ 646.199834][T14930] alloc_empty_file+0xac/0x1b0 [ 646.199845][T14930] alloc_file+0x60/0x4c0 [ 646.199863][T14930] alloc_file_pseudo+0x1d4/0x260 [ 646.215810][T14930] __shmem_file_setup+0x1a2/0x280 [ 646.215826][T14930] shmem_file_setup+0x2f/0x40 [ 646.215839][T14930] __se_sys_memfd_create+0x28e/0x4b0 [ 646.215856][T14930] ? do_syscall_64+0x1d/0x1c0 [ 646.236294][T14930] __x64_sys_memfd_create+0x5b/0x70 [ 646.236309][T14930] do_syscall_64+0xf7/0x1c0 [ 646.236325][T14930] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.236335][T14930] RIP: 0033:0x459a59 [ 646.236345][T14930] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.236350][T14930] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 646.236358][T14930] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a59 [ 646.236364][T14930] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be9b7 [ 646.236369][T14930] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 646.236375][T14930] R10: 0000000000010000 R11: 0000000000000246 R12: 00007fd89d2b46d4 [ 646.236380][T14930] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 646.393740][T14938] FAULT_INJECTION: forcing a failure. [ 646.393740][T14938] name failslab, interval 1, probability 0, space 0, times 0 [ 646.413761][T14938] CPU: 0 PID: 14938 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 646.427791][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.437837][T14938] Call Trace: [ 646.437855][T14938] dump_stack+0x1d8/0x2f8 [ 646.437873][T14938] should_fail+0x555/0x770 [ 646.450491][T14938] __should_failslab+0x11a/0x160 [ 646.455424][T14938] ? security_file_alloc+0x36/0x200 [ 646.455435][T14938] should_failslab+0x9/0x20 [ 646.455445][T14938] kmem_cache_alloc+0x56/0x2e0 [ 646.455457][T14938] security_file_alloc+0x36/0x200 [ 646.455469][T14938] __alloc_file+0xde/0x390 [ 646.455480][T14938] alloc_empty_file+0xac/0x1b0 [ 646.455489][T14938] alloc_file+0x60/0x4c0 [ 646.455501][T14938] alloc_file_pseudo+0x1d4/0x260 [ 646.455519][T14938] __shmem_file_setup+0x1a2/0x280 [ 646.471071][T14938] shmem_file_setup+0x2f/0x40 [ 646.480471][T14938] __se_sys_memfd_create+0x28e/0x4b0 [ 646.489421][T14938] ? do_syscall_64+0x1d/0x1c0 [ 646.499364][T14938] __x64_sys_memfd_create+0x5b/0x70 [ 646.509289][T14938] do_syscall_64+0xf7/0x1c0 [ 646.519113][T14938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.529461][T14938] RIP: 0033:0x459a59 [ 646.533342][T14938] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.533347][T14938] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 646.533356][T14938] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a59 [ 646.533360][T14938] RDX: 0000000020000068 RSI: 0000000000000000 RDI: 00000000004be9b7 03:07:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x10}}}}]}, 0x48}}, 0x0) 03:07:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:43 executing program 4 (fault-call:0 fault-nth:6): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 646.533366][T14938] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 646.533371][T14938] R10: 0000000000010000 R11: 0000000000000246 R12: 00007fd89d2b46d4 [ 646.533375][T14938] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 646.638995][T14947] FAULT_INJECTION: forcing a failure. [ 646.638995][T14947] name failslab, interval 1, probability 0, space 0, times 0 [ 646.673846][T14947] CPU: 0 PID: 14947 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 646.681772][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.691826][T14947] Call Trace: [ 646.695119][T14947] dump_stack+0x1d8/0x2f8 [ 646.699447][T14947] should_fail+0x555/0x770 [ 646.703880][T14947] __should_failslab+0x11a/0x160 [ 646.709768][T14947] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 646.709780][T14947] should_failslab+0x9/0x20 [ 646.709793][T14947] __kmalloc+0x7a/0x340 [ 646.724102][T14947] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 646.724114][T14947] tomoyo_realpath_from_path+0xdc/0x7c0 [ 646.724132][T14947] tomoyo_path_perm+0x192/0x850 [ 646.735364][T14947] tomoyo_path_truncate+0x1c/0x20 [ 646.735377][T14947] security_path_truncate+0xd5/0x150 [ 646.735390][T14947] do_sys_ftruncate+0x493/0x710 [ 646.735405][T14947] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 646.735417][T14947] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 646.735426][T14947] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 646.735436][T14947] ? do_syscall_64+0x1d/0x1c0 [ 646.735449][T14947] __x64_sys_ftruncate+0x60/0x70 [ 646.745272][T14947] do_syscall_64+0xf7/0x1c0 03:07:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x900}}}}]}, 0x48}}, 0x0) 03:07:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000080)={0x10000, 0x1000}) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0xfffffffa, 0x7ff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 646.755548][T14947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 646.755556][T14947] RIP: 0033:0x459a27 [ 646.755566][T14947] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 646.755572][T14947] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 646.755581][T14947] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a27 [ 646.755587][T14947] RDX: 0000000020000068 RSI: 0000000000020000 RDI: 0000000000000004 [ 646.755593][T14947] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 646.755599][T14947] R10: 0000000000010000 R11: 0000000000000217 R12: 0000000000000004 [ 646.755603][T14947] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 646.911574][T14947] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:43 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3f000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:43 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x11}}}}]}, 0x48}}, 0x0) 03:07:43 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff8000/0x5000)=nil, 0x5000}, &(0x7f00000000c0)=0x10) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x600000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000001c0)=""/8) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000040)) 03:07:43 executing program 4 (fault-call:0 fault-nth:7): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xa00}}}}]}, 0x48}}, 0x0) [ 647.137425][T14977] FAULT_INJECTION: forcing a failure. [ 647.137425][T14977] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 647.150683][T14977] CPU: 1 PID: 14977 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 647.150691][T14977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.150695][T14977] Call Trace: [ 647.150711][T14977] dump_stack+0x1d8/0x2f8 [ 647.150724][T14977] should_fail+0x555/0x770 [ 647.150739][T14977] should_fail_alloc_page+0x55/0x60 [ 647.150752][T14977] prepare_alloc_pages+0x283/0x460 [ 647.185867][T14977] __alloc_pages_nodemask+0xb2/0x5d0 [ 647.185886][T14977] kmem_getpages+0x4d/0xa00 [ 647.196254][T14977] cache_grow_begin+0x7e/0x2c0 [ 647.196269][T14977] cache_alloc_refill+0x311/0x3f0 [ 647.196279][T14977] ? check_preemption_disabled+0xb7/0x2a0 [ 647.196294][T14977] __kmalloc+0x318/0x340 [ 647.205511][T14977] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 647.205525][T14977] tomoyo_realpath_from_path+0xdc/0x7c0 [ 647.205546][T14977] tomoyo_path_perm+0x192/0x850 [ 647.205581][T14977] tomoyo_path_truncate+0x1c/0x20 [ 647.216436][T14977] security_path_truncate+0xd5/0x150 [ 647.216452][T14977] do_sys_ftruncate+0x493/0x710 [ 647.216469][T14977] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 647.216481][T14977] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 647.216489][T14977] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 647.216501][T14977] ? do_syscall_64+0x1d/0x1c0 [ 647.226454][T14977] __x64_sys_ftruncate+0x60/0x70 [ 647.226468][T14977] do_syscall_64+0xf7/0x1c0 [ 647.226483][T14977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 647.226494][T14977] RIP: 0033:0x459a27 [ 647.226505][T14977] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 647.226511][T14977] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 647.226521][T14977] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a27 [ 647.226528][T14977] RDX: 0000000020000068 RSI: 0000000000020000 RDI: 0000000000000004 03:07:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 647.226533][T14977] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 647.226543][T14977] R10: 0000000000010000 R11: 0000000000000217 R12: 0000000000000004 [ 647.236902][T14977] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 647.286881][T14987] overlayfs: unrecognized mount option "lowerdirDk“Ous" or missing value [ 647.436217][T14973] validate_nla: 28 callbacks suppressed [ 647.436223][T14973] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 647.450334][T14973] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:44 executing program 4 (fault-call:0 fault-nth:8): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 647.477870][T14995] overlayfs: unrecognized mount option "lowerdirDk“Ous" or missing value [ 647.545796][T15001] FAULT_INJECTION: forcing a failure. [ 647.545796][T15001] name failslab, interval 1, probability 0, space 0, times 0 [ 647.580039][T15001] CPU: 1 PID: 15001 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 647.587959][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.587964][T15001] Call Trace: [ 647.587982][T15001] dump_stack+0x1d8/0x2f8 [ 647.587995][T15001] should_fail+0x555/0x770 [ 647.588011][T15001] __should_failslab+0x11a/0x160 [ 647.601430][T15001] ? tomoyo_encode2+0x273/0x5a0 [ 647.601441][T15001] should_failslab+0x9/0x20 [ 647.601452][T15001] __kmalloc+0x7a/0x340 [ 647.601464][T15001] tomoyo_encode2+0x273/0x5a0 [ 647.601478][T15001] ? dynamic_dname+0xf0/0xf0 [ 647.601490][T15001] tomoyo_realpath_from_path+0x769/0x7c0 [ 647.610205][T15001] tomoyo_path_perm+0x192/0x850 [ 647.610244][T15001] tomoyo_path_truncate+0x1c/0x20 [ 647.620934][T15001] security_path_truncate+0xd5/0x150 [ 647.620950][T15001] do_sys_ftruncate+0x493/0x710 [ 647.620968][T15001] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 647.620981][T15001] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 647.629621][T15001] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 647.629632][T15001] ? do_syscall_64+0x1d/0x1c0 [ 647.629646][T15001] __x64_sys_ftruncate+0x60/0x70 [ 647.629657][T15001] do_syscall_64+0xf7/0x1c0 [ 647.629671][T15001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 647.638988][T15001] RIP: 0033:0x459a27 [ 647.638998][T15001] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 647.639005][T15001] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 647.639014][T15001] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000459a27 [ 647.639021][T15001] RDX: 0000000020000068 RSI: 0000000000020000 RDI: 0000000000000004 [ 647.639027][T15001] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 647.639032][T15001] R10: 0000000000010000 R11: 0000000000000217 R12: 0000000000000004 [ 647.639040][T15001] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 647.651447][T15001] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:44 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000040", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x10}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r4, 0x3}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0xffff5baf, @empty, 0x81}], 0x2c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x12}}}}]}, 0x48}}, 0x0) [ 647.812265][T15003] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 647.824013][T15003] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:44 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xb00}}}}]}, 0x48}}, 0x0) 03:07:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:44 executing program 4 (fault-call:0 fault-nth:9): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x13}}}}]}, 0x48}}, 0x0) [ 647.988477][T15025] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 648.022939][T15026] FAULT_INJECTION: forcing a failure. [ 648.022939][T15026] name failslab, interval 1, probability 0, space 0, times 0 [ 648.035949][T15026] CPU: 1 PID: 15026 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 648.043817][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.053864][T15026] Call Trace: [ 648.057135][T15026] dump_stack+0x1d8/0x2f8 [ 648.060211][T15025] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 648.061451][T15026] should_fail+0x555/0x770 [ 648.073998][T15026] __should_failslab+0x11a/0x160 [ 648.078926][T15026] ? xas_create+0x1197/0x1910 [ 648.078938][T15026] should_failslab+0x9/0x20 [ 648.078950][T15026] kmem_cache_alloc+0x56/0x2e0 [ 648.078963][T15026] xas_create+0x1197/0x1910 [ 648.078983][T15026] xas_create_range+0x142/0x700 [ 648.088134][T15026] shmem_add_to_page_cache+0x91e/0x1290 [ 648.088174][T15026] shmem_getpage_gfp+0x184e/0x2c20 [ 648.088206][T15026] shmem_write_begin+0xcb/0x1b0 [ 648.097465][T15026] generic_perform_write+0x25d/0x4e0 [ 648.097489][T15026] __generic_file_write_iter+0x24b/0x520 [ 648.097505][T15026] generic_file_write_iter+0x48e/0x630 [ 648.097528][T15026] __vfs_write+0x5a1/0x740 [ 648.097551][T15026] vfs_write+0x275/0x590 [ 648.107911][T15026] __x64_sys_pwrite64+0x162/0x1d0 [ 648.107929][T15026] do_syscall_64+0xf7/0x1c0 [ 648.107946][T15026] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 648.107955][T15026] RIP: 0033:0x4139a7 [ 648.107965][T15026] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 03:07:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 648.107970][T15026] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 648.117890][T15026] RAX: ffffffffffffffda RBX: 0000000020000050 RCX: 00000000004139a7 [ 648.117896][T15026] RDX: 00000000000000be RSI: 0000000020000240 RDI: 0000000000000004 [ 648.117901][T15026] RBP: 0000000000000000 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 648.117907][T15026] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 [ 648.117913][T15026] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 648.307031][T15039] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 648.318424][T15039] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x14}}}}]}, 0x48}}, 0x0) 03:07:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:45 executing program 4 (fault-call:0 fault-nth:10): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xc00}}}}]}, 0x48}}, 0x0) [ 648.477349][T15056] FAULT_INJECTION: forcing a failure. [ 648.477349][T15056] name failslab, interval 1, probability 0, space 0, times 0 [ 648.502822][T15056] CPU: 0 PID: 15056 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 648.503958][T15052] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 648.510742][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.510748][T15056] Call Trace: [ 648.510766][T15056] dump_stack+0x1d8/0x2f8 [ 648.510781][T15056] should_fail+0x555/0x770 [ 648.510804][T15056] __should_failslab+0x11a/0x160 [ 648.520524][T15052] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 648.528906][T15056] ? getname_flags+0xba/0x640 [ 648.528917][T15056] should_failslab+0x9/0x20 [ 648.528929][T15056] kmem_cache_alloc+0x56/0x2e0 [ 648.528938][T15056] ? check_preemption_disabled+0xb7/0x2a0 [ 648.528948][T15056] getname_flags+0xba/0x640 [ 648.528961][T15056] getname+0x19/0x20 [ 648.528972][T15056] do_sys_open+0x261/0x560 [ 648.528988][T15056] __x64_sys_open+0x87/0x90 [ 648.529002][T15056] do_syscall_64+0xf7/0x1c0 [ 648.529018][T15056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 648.529026][T15056] RIP: 0033:0x413941 [ 648.529036][T15056] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 648.529042][T15056] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 648.529050][T15056] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000413941 [ 648.529056][T15056] RDX: 00007fd89d2b3b0a RSI: 0000000000000002 RDI: 00007fd89d2b3b00 [ 648.529064][T15056] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 648.541040][T15056] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 648.541047][T15056] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:45 executing program 4 (fault-call:0 fault-nth:11): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:45 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:45 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x18}}}}]}, 0x48}}, 0x0) 03:07:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xf00}}}}]}, 0x48}}, 0x0) 03:07:45 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 648.783043][T15063] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 648.820033][T15066] FAULT_INJECTION: forcing a failure. [ 648.820033][T15066] name failslab, interval 1, probability 0, space 0, times 0 [ 648.851206][T15066] CPU: 0 PID: 15066 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 648.859123][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.869180][T15066] Call Trace: [ 648.869201][T15066] dump_stack+0x1d8/0x2f8 [ 648.869215][T15066] should_fail+0x555/0x770 [ 648.869232][T15066] __should_failslab+0x11a/0x160 [ 648.869241][T15066] ? getname_flags+0xba/0x640 [ 648.869251][T15066] should_failslab+0x9/0x20 [ 648.869263][T15066] kmem_cache_alloc+0x56/0x2e0 [ 648.869274][T15066] ? check_preemption_disabled+0xb7/0x2a0 [ 648.869284][T15066] getname_flags+0xba/0x640 [ 648.869295][T15066] getname+0x19/0x20 [ 648.869304][T15066] do_sys_open+0x261/0x560 [ 648.869318][T15066] __x64_sys_open+0x87/0x90 [ 648.869329][T15066] do_syscall_64+0xf7/0x1c0 [ 648.869343][T15066] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 648.869357][T15066] RIP: 0033:0x413941 [ 648.878105][T15066] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 648.892159][T15066] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 648.907076][T15066] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000413941 [ 648.907083][T15066] RDX: 00007fd89d2b3b0a RSI: 0000000000000002 RDI: 00007fd89d2b3b00 [ 648.907089][T15066] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 648.907095][T15066] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 03:07:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:45 executing program 4 (fault-call:0 fault-nth:12): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 648.907101][T15066] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 649.014299][T15083] FAULT_INJECTION: forcing a failure. [ 649.014299][T15083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 649.027522][T15083] CPU: 1 PID: 15083 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 649.027530][T15083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.027533][T15083] Call Trace: [ 649.027550][T15083] dump_stack+0x1d8/0x2f8 [ 649.027565][T15083] should_fail+0x555/0x770 [ 649.027580][T15083] should_fail_alloc_page+0x55/0x60 [ 649.027592][T15083] prepare_alloc_pages+0x283/0x460 [ 649.045701][T15083] __alloc_pages_nodemask+0xb2/0x5d0 [ 649.045713][T15083] ? __kasan_check_write+0x14/0x20 [ 649.045728][T15083] kmem_getpages+0x4d/0xa00 [ 649.045742][T15083] cache_grow_begin+0x7e/0x2c0 [ 649.053320][T15083] cache_alloc_refill+0x311/0x3f0 [ 649.053332][T15083] ? check_preemption_disabled+0xb7/0x2a0 [ 649.053347][T15083] kmem_cache_alloc+0x2b9/0x2e0 [ 649.053364][T15083] ? getname_flags+0xba/0x640 [ 649.078410][T15083] getname_flags+0xba/0x640 [ 649.087660][T15083] getname+0x19/0x20 [ 649.087673][T15083] do_sys_open+0x261/0x560 [ 649.087688][T15083] __x64_sys_open+0x87/0x90 [ 649.087702][T15083] do_syscall_64+0xf7/0x1c0 [ 649.098401][T15083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.098412][T15083] RIP: 0033:0x413941 [ 649.098422][T15083] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 649.098428][T15083] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 649.107912][T15083] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000413941 [ 649.107918][T15083] RDX: 00007fd89d2b3b0a RSI: 0000000000000002 RDI: 00007fd89d2b3b00 [ 649.107924][T15083] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 649.107930][T15083] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 03:07:46 executing program 4 (fault-call:0 fault-nth:13): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 649.107936][T15083] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 649.108216][ C1] net_ratelimit: 24 callbacks suppressed [ 649.108222][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 649.135702][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 649.291513][T15076] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x1100}}}}]}, 0x48}}, 0x0) 03:07:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x60}}}}]}, 0x48}}, 0x0) [ 649.336064][T15093] FAULT_INJECTION: forcing a failure. [ 649.336064][T15093] name failslab, interval 1, probability 0, space 0, times 0 [ 649.411296][T15093] CPU: 1 PID: 15093 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 649.419227][T15093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.429284][T15093] Call Trace: [ 649.432575][T15093] dump_stack+0x1d8/0x2f8 [ 649.436903][T15093] should_fail+0x555/0x770 [ 649.441313][T15093] __should_failslab+0x11a/0x160 [ 649.441326][T15093] ? __alloc_file+0x2c/0x390 [ 649.441339][T15093] should_failslab+0x9/0x20 [ 649.441351][T15093] kmem_cache_alloc+0x56/0x2e0 [ 649.441362][T15093] __alloc_file+0x2c/0x390 [ 649.441374][T15093] alloc_empty_file+0xac/0x1b0 [ 649.450909][T15093] path_openat+0x9e/0x4420 [ 649.450923][T15093] ? __kasan_kmalloc+0x178/0x1b0 [ 649.450938][T15093] ? __lock_acquire+0xc75/0x1be0 [ 649.450950][T15093] ? rcu_read_lock_sched_held+0x10b/0x170 [ 649.460197][T15093] do_filp_open+0x192/0x3d0 [ 649.460215][T15093] ? _raw_spin_unlock+0x2c/0x50 [ 649.460239][T15093] do_sys_open+0x29f/0x560 [ 649.469369][T15093] __x64_sys_open+0x87/0x90 03:07:46 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{0xcc, 0x9, 0xf8, 0x109, 0xd9, 0x56d, 0x126, 0x9}, "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", [[], [], [], [], [], [], [], []]}, 0x1820) mkdir(&(0x7f0000000400)='./file0\x00', 0x129) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c00da020ee6eea00e0b934c55c5f23f7aa64a3aa4c3b8b3ba41dfa2f31f6b22c5958a550bdf66038606ecd079d50a9e32ce2cb6031e7da91974bf87dc815e49523377f4439c859272498db3563b5b30b1910285c6cb2fecf3cb07bb5644daf9347dbcab5ceddf079c1c465b3cc123f4d630e98b927f05fd502dead48bc3d20d58d7c8ef8e362135d773c2d3844c7db707559aef5439a0f346344952fbbbb8"]) [ 649.469383][T15093] do_syscall_64+0xf7/0x1c0 [ 649.469397][T15093] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.469409][T15093] RIP: 0033:0x413941 [ 649.478733][T15093] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 649.478739][T15093] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 649.478750][T15093] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000413941 03:07:46 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80300000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:46 executing program 4 (fault-call:0 fault-nth:14): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 649.478757][T15093] RDX: 00007fd89d2b3b0a RSI: 0000000000000002 RDI: 00007fd89d2b3b00 [ 649.478762][T15093] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 649.478768][T15093] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 649.478776][T15093] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 649.630564][T15106] FAULT_INJECTION: forcing a failure. [ 649.630564][T15106] name failslab, interval 1, probability 0, space 0, times 0 [ 649.647222][T15106] CPU: 1 PID: 15106 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 649.655131][T15106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.665185][T15106] Call Trace: [ 649.665204][T15106] dump_stack+0x1d8/0x2f8 [ 649.665219][T15106] should_fail+0x555/0x770 [ 649.665237][T15106] __should_failslab+0x11a/0x160 [ 649.665249][T15106] ? tomoyo_encode2+0x273/0x5a0 [ 649.665261][T15106] should_failslab+0x9/0x20 [ 649.665271][T15106] __kmalloc+0x7a/0x340 [ 649.665282][T15106] tomoyo_encode2+0x273/0x5a0 [ 649.665297][T15106] tomoyo_realpath_from_path+0x769/0x7c0 [ 649.665320][T15106] tomoyo_check_open_permission+0x1ce/0x9d0 [ 649.677333][T15106] tomoyo_file_open+0x141/0x190 [ 649.677350][T15106] security_file_open+0x65/0x2f0 [ 649.677365][T15106] do_dentry_open+0x345/0xf80 [ 649.677385][T15106] vfs_open+0x73/0x80 [ 649.687127][T15106] path_openat+0x1397/0x4420 [ 649.687182][T15106] do_filp_open+0x192/0x3d0 [ 649.687216][T15106] do_sys_open+0x29f/0x560 [ 649.695835][T15106] __x64_sys_open+0x87/0x90 [ 649.695851][T15106] do_syscall_64+0xf7/0x1c0 [ 649.695867][T15106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 649.695877][T15106] RIP: 0033:0x413941 [ 649.695887][T15106] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 649.695893][T15106] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 649.706187][T15106] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000413941 [ 649.706194][T15106] RDX: 00007fd89d2b3b0a RSI: 0000000000000002 RDI: 00007fd89d2b3b00 [ 649.706200][T15106] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 649.706206][T15106] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 03:07:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8030000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 649.706212][T15106] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 649.810460][T15106] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:46 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x300}}}}]}, 0x48}}, 0x0) 03:07:46 executing program 4 (fault-call:0 fault-nth:15): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 649.922506][T15109] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x1200}}}}]}, 0x48}}, 0x0) [ 649.991200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 649.997060][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 650.034689][T15125] FAULT_INJECTION: forcing a failure. [ 650.034689][T15125] name failslab, interval 1, probability 0, space 0, times 0 [ 650.064949][T15125] CPU: 1 PID: 15125 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 650.072883][T15125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.082930][T15125] Call Trace: [ 650.082946][T15125] dump_stack+0x1d8/0x2f8 [ 650.082962][T15125] should_fail+0x555/0x770 [ 650.082979][T15125] __should_failslab+0x11a/0x160 [ 650.090559][T15125] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 650.099863][T15125] should_failslab+0x9/0x20 [ 650.110018][T15125] __kmalloc+0x7a/0x340 [ 650.110027][T15125] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 650.110038][T15125] tomoyo_realpath_from_path+0xdc/0x7c0 [ 650.110057][T15125] tomoyo_check_open_permission+0x1ce/0x9d0 [ 650.119898][T15125] tomoyo_file_open+0x141/0x190 [ 650.119913][T15125] security_file_open+0x65/0x2f0 [ 650.131308][T15125] do_dentry_open+0x345/0xf80 [ 650.131332][T15125] vfs_open+0x73/0x80 [ 650.141068][T15125] path_openat+0x1397/0x4420 [ 650.149709][T15125] do_filp_open+0x192/0x3d0 [ 650.158742][T15125] do_sys_open+0x29f/0x560 [ 650.163148][T15125] __x64_sys_open+0x87/0x90 [ 650.163160][T15125] do_syscall_64+0xf7/0x1c0 [ 650.163176][T15125] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 650.163190][T15125] RIP: 0033:0x413941 03:07:47 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000002c0)={0x0, @reserved}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 650.172171][T15125] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 650.172177][T15125] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 650.172187][T15125] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000413941 [ 650.172193][T15125] RDX: 00007fd89d2b3b0a RSI: 0000000000000002 RDI: 00007fd89d2b3b00 [ 650.172198][T15125] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 650.172204][T15125] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 650.172210][T15125] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 650.172452][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 650.182055][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 650.182164][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 650.182201][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 650.189231][T15125] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x1300}}}}]}, 0x48}}, 0x0) 03:07:47 executing program 4 (fault-call:0 fault-nth:16): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x500}}}}]}, 0x48}}, 0x0) 03:07:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:47 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 650.535896][T15154] FAULT_INJECTION: forcing a failure. [ 650.535896][T15154] name failslab, interval 1, probability 0, space 0, times 0 [ 650.551221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 650.557049][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 650.595364][T15154] CPU: 0 PID: 15154 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 650.603286][T15154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.603291][T15154] Call Trace: [ 650.603308][T15154] dump_stack+0x1d8/0x2f8 [ 650.603329][T15154] should_fail+0x555/0x770 [ 650.616658][T15154] __should_failslab+0x11a/0x160 [ 650.616672][T15154] ? tomoyo_encode2+0x273/0x5a0 [ 650.616683][T15154] should_failslab+0x9/0x20 [ 650.616692][T15154] __kmalloc+0x7a/0x340 [ 650.616704][T15154] tomoyo_encode2+0x273/0x5a0 [ 650.625415][T15154] tomoyo_realpath_from_path+0x769/0x7c0 [ 650.625437][T15154] tomoyo_path_number_perm+0x166/0x640 [ 650.625468][T15154] ? smack_file_ioctl+0x226/0x2e0 [ 650.643841][T15154] ? __fget+0x4b1/0x510 [ 650.643860][T15154] tomoyo_file_ioctl+0x23/0x30 [ 650.643874][T15154] security_file_ioctl+0x6d/0xd0 [ 650.643888][T15154] __x64_sys_ioctl+0xa3/0x120 [ 650.643901][T15154] do_syscall_64+0xf7/0x1c0 [ 650.643916][T15154] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 650.643925][T15154] RIP: 0033:0x4598c7 [ 650.643935][T15154] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 650.643940][T15154] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 650.643949][T15154] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 650.643954][T15154] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 650.643959][T15154] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 650.643968][T15154] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 650.654244][T15154] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 650.665263][T15154] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x1400}}}}]}, 0x48}}, 0x0) 03:07:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x600}}}}]}, 0x48}}, 0x0) 03:07:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:47 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x88470000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 650.814836][T15167] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:47 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x40020a) write$cgroup_int(r1, &(0x7f0000000080), 0x12) r2 = accept4(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000080)=0x9, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:47 executing program 4 (fault-call:0 fault-nth:17): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 651.018143][T15185] FAULT_INJECTION: forcing a failure. [ 651.018143][T15185] name failslab, interval 1, probability 0, space 0, times 0 [ 651.102022][T15185] CPU: 0 PID: 15185 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 651.109951][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.120005][T15185] Call Trace: [ 651.123303][T15185] dump_stack+0x1d8/0x2f8 [ 651.127656][T15185] should_fail+0x555/0x770 [ 651.132081][T15185] __should_failslab+0x11a/0x160 [ 651.132094][T15185] ? tomoyo_encode2+0x273/0x5a0 [ 651.132105][T15185] should_failslab+0x9/0x20 [ 651.132115][T15185] __kmalloc+0x7a/0x340 [ 651.132127][T15185] tomoyo_encode2+0x273/0x5a0 [ 651.132143][T15185] tomoyo_realpath_from_path+0x769/0x7c0 [ 651.132162][T15185] tomoyo_check_open_permission+0x1ce/0x9d0 [ 651.132199][T15185] tomoyo_file_open+0x141/0x190 [ 651.132212][T15185] security_file_open+0x65/0x2f0 [ 651.132268][T15185] do_dentry_open+0x345/0xf80 [ 651.160873][T15185] vfs_open+0x73/0x80 [ 651.160887][T15185] path_openat+0x1397/0x4420 [ 651.160931][T15185] do_filp_open+0x192/0x3d0 [ 651.171632][T15185] do_sys_open+0x29f/0x560 [ 651.171649][T15185] __x64_sys_open+0x87/0x90 [ 651.171663][T15185] do_syscall_64+0xf7/0x1c0 [ 651.171678][T15185] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.171688][T15185] RIP: 0033:0x413941 [ 651.171698][T15185] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 651.171703][T15185] RSP: 002b:00007fd89d2b3a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 651.171713][T15185] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000413941 [ 651.171718][T15185] RDX: 00007fd89d2b3b0a RSI: 0000000000000002 RDI: 00007fd89d2b3b00 [ 651.171723][T15185] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 651.171729][T15185] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 651.171738][T15185] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 651.183806][T15185] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x900}}}}]}, 0x48}}, 0x0) [ 651.308920][T15187] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x1800}}}}]}, 0x48}}, 0x0) 03:07:48 executing program 4 (fault-call:0 fault-nth:18): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 651.509846][T15214] FAULT_INJECTION: forcing a failure. [ 651.509846][T15214] name failslab, interval 1, probability 0, space 0, times 0 [ 651.531591][T15214] CPU: 0 PID: 15214 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 651.539509][T15214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.549562][T15214] Call Trace: [ 651.552873][T15214] dump_stack+0x1d8/0x2f8 [ 651.557197][T15214] should_fail+0x555/0x770 [ 651.557216][T15214] __should_failslab+0x11a/0x160 [ 651.557230][T15214] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 651.557245][T15214] should_failslab+0x9/0x20 [ 651.576763][T15214] __kmalloc+0x7a/0x340 [ 651.580910][T15214] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 651.580924][T15214] tomoyo_realpath_from_path+0xdc/0x7c0 [ 651.580945][T15214] tomoyo_path_number_perm+0x166/0x640 [ 651.580977][T15214] ? smack_file_ioctl+0x226/0x2e0 [ 651.602655][T15214] ? __fget+0x4b1/0x510 03:07:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:48 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x88480000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 651.602672][T15214] tomoyo_file_ioctl+0x23/0x30 [ 651.602685][T15214] security_file_ioctl+0x6d/0xd0 [ 651.602700][T15214] __x64_sys_ioctl+0xa3/0x120 [ 651.602715][T15214] do_syscall_64+0xf7/0x1c0 [ 651.602730][T15214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 651.602739][T15214] RIP: 0033:0x4598c7 [ 651.602749][T15214] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 651.602754][T15214] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.602764][T15214] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 651.602770][T15214] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 651.602776][T15214] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 651.602780][T15214] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 651.602785][T15214] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 651.686647][T15214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 651.785119][T15227] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xa00}}}}]}, 0x48}}, 0x0) 03:07:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:48 executing program 4 (fault-call:0 fault-nth:19): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 651.912572][T15236] FAULT_INJECTION: forcing a failure. [ 651.912572][T15236] name failslab, interval 1, probability 0, space 0, times 0 [ 651.938291][T15236] CPU: 1 PID: 15236 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 651.946218][T15236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.956274][T15236] Call Trace: [ 651.959596][T15236] dump_stack+0x1d8/0x2f8 [ 651.963924][T15236] should_fail+0x555/0x770 [ 651.968324][T15236] __should_failslab+0x11a/0x160 [ 651.973255][T15236] ? tomoyo_encode2+0x273/0x5a0 [ 651.978105][T15236] should_failslab+0x9/0x20 [ 651.982608][T15236] __kmalloc+0x7a/0x340 [ 651.986763][T15236] tomoyo_encode2+0x273/0x5a0 [ 651.986780][T15236] tomoyo_realpath_from_path+0x769/0x7c0 [ 651.986800][T15236] tomoyo_path_number_perm+0x166/0x640 [ 651.986830][T15236] ? smack_file_ioctl+0x226/0x2e0 [ 652.002546][T15236] ? __fget+0x4b1/0x510 03:07:48 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x840, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file1\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)) 03:07:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x3f00}}}}]}, 0x48}}, 0x0) [ 652.002563][T15236] tomoyo_file_ioctl+0x23/0x30 [ 652.002575][T15236] security_file_ioctl+0x6d/0xd0 [ 652.002592][T15236] __x64_sys_ioctl+0xa3/0x120 [ 652.011733][T15236] do_syscall_64+0xf7/0x1c0 [ 652.011750][T15236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.011760][T15236] RIP: 0033:0x4598c7 [ 652.011769][T15236] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.011775][T15236] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.011783][T15236] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 652.011792][T15236] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 652.026100][T15236] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 652.026107][T15236] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 652.026113][T15236] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 652.030992][T15236] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:49 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 652.196214][T15249] overlayfs: missing 'lowerdir' 03:07:49 executing program 4 (fault-call:0 fault-nth:20): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 652.275633][T15254] overlayfs: missing 'lowerdir' [ 652.326750][T15262] FAULT_INJECTION: forcing a failure. [ 652.326750][T15262] name failslab, interval 1, probability 0, space 0, times 0 [ 652.375299][T15262] CPU: 1 PID: 15262 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 652.383220][T15262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.383226][T15262] Call Trace: [ 652.383243][T15262] dump_stack+0x1d8/0x2f8 [ 652.383258][T15262] should_fail+0x555/0x770 [ 652.383276][T15262] __should_failslab+0x11a/0x160 [ 652.383287][T15262] ? tomoyo_encode2+0x273/0x5a0 [ 652.383298][T15262] should_failslab+0x9/0x20 [ 652.383312][T15262] __kmalloc+0x7a/0x340 [ 652.396646][T15262] tomoyo_encode2+0x273/0x5a0 [ 652.405366][T15262] tomoyo_realpath_from_path+0x769/0x7c0 [ 652.405384][T15262] tomoyo_path_number_perm+0x166/0x640 [ 652.415182][T15262] ? smack_file_ioctl+0x226/0x2e0 [ 652.415193][T15262] ? __fget+0x4b1/0x510 [ 652.415206][T15262] tomoyo_file_ioctl+0x23/0x30 [ 652.415221][T15262] security_file_ioctl+0x6d/0xd0 [ 652.423851][T15262] __x64_sys_ioctl+0xa3/0x120 [ 652.423866][T15262] do_syscall_64+0xf7/0x1c0 [ 652.423881][T15262] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.444592][T15262] RIP: 0033:0x4598c7 [ 652.444603][T15262] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.444608][T15262] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.453493][T15262] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 652.453500][T15262] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 03:07:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xb00}}}}]}, 0x48}}, 0x0) 03:07:49 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='c', 0x300, 0xfffffffffffffffc) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x440000, 0x0) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffc, r0, 0x0) keyctl$negate(0xd, 0x0, 0x0, r0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r3, 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000140)=0xc8) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r4 = msgget$private(0x0, 0xa) msgctl$MSG_STAT(r4, 0xb, &(0x7f00000002c0)=""/184) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707032618a427264697269723d3b2f66696c65302c6d657461636f70793d6f6e2c00"/55]) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, &(0x7f00000001c0)=0x4416) 03:07:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x4000}}}}]}, 0x48}}, 0x0) 03:07:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 652.453506][T15262] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 652.453511][T15262] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 652.453520][T15262] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 652.534445][T15262] ERROR: Out of memory at tomoyo_realpath_from_path. [ 652.600873][T15275] validate_nla: 24 callbacks suppressed [ 652.600878][T15275] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 652.616640][T15275] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:49 executing program 4 (fault-call:0 fault-nth:21): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 652.730397][T15288] FAULT_INJECTION: forcing a failure. [ 652.730397][T15288] name failslab, interval 1, probability 0, space 0, times 0 [ 652.748943][T15290] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 652.766850][T15288] CPU: 0 PID: 15288 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 03:07:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 652.772574][T15290] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 652.775722][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.775729][T15288] Call Trace: [ 652.775747][T15288] dump_stack+0x1d8/0x2f8 [ 652.775762][T15288] should_fail+0x555/0x770 [ 652.807850][T15288] __should_failslab+0x11a/0x160 [ 652.812772][T15288] ? loop_set_fd+0x1470/0x1470 [ 652.817700][T15288] should_failslab+0x9/0x20 [ 652.822186][T15288] kmem_cache_alloc_trace+0x5d/0x2f0 [ 652.829851][T15288] ? __kthread_create_on_node+0xb2/0x3b0 [ 652.835723][T15288] ? loop_set_fd+0x1470/0x1470 [ 652.840634][T15288] __kthread_create_on_node+0xb2/0x3b0 [ 652.850155][T15288] ? loop_set_fd+0x1470/0x1470 [ 652.855059][T15288] kthread_create_on_node+0x72/0xa0 [ 652.861358][T15288] ? lockdep_init_map+0x2a/0x680 [ 652.866276][T15288] ? __kthread_init_worker+0x5a/0xe0 [ 652.871641][T15288] loop_set_fd+0x6a8/0x1470 [ 652.876137][T15288] ? check_preemption_disabled+0xb7/0x2a0 [ 652.881852][T15288] ? tomoyo_path_number_perm+0x4e1/0x640 [ 652.887744][T15288] lo_ioctl+0xd5/0x2200 [ 652.892747][T15288] ? __kasan_slab_free+0x12a/0x1e0 [ 652.897837][T15288] ? kasan_slab_free+0xe/0x10 [ 652.902490][T15288] ? kfree+0x115/0x200 [ 652.908390][T15288] ? tomoyo_path_number_perm+0x4e1/0x640 [ 652.915054][T15288] ? tomoyo_file_ioctl+0x23/0x30 [ 652.920759][T15288] ? security_file_ioctl+0x6d/0xd0 [ 652.925940][T15288] ? __x64_sys_ioctl+0xa3/0x120 [ 652.930763][T15288] ? do_syscall_64+0xf7/0x1c0 [ 652.935851][T15288] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 652.941897][T15288] ? debug_check_no_obj_freed+0x505/0x5b0 [ 652.947611][T15288] ? rcu_lock_release+0x9/0x30 [ 652.952886][T15288] ? rcu_lock_release+0x9/0x30 [ 652.957839][T15288] ? lo_release+0x1f0/0x1f0 [ 652.964239][T15288] blkdev_ioctl+0x807/0x2980 [ 652.968825][T15288] ? tomoyo_path_number_perm+0x53e/0x640 [ 652.974459][T15288] block_ioctl+0xbd/0x100 [ 652.978767][T15288] ? blkdev_iopoll+0x100/0x100 [ 652.983520][T15288] do_vfs_ioctl+0x744/0x1730 [ 652.988088][T15288] ? __fget+0x4b1/0x510 [ 652.992249][T15288] ? tomoyo_file_ioctl+0x23/0x30 [ 652.997614][T15288] ? security_file_ioctl+0xa1/0xd0 [ 653.003163][T15288] __x64_sys_ioctl+0xe3/0x120 [ 653.007837][T15288] do_syscall_64+0xf7/0x1c0 [ 653.012323][T15288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.018201][T15288] RIP: 0033:0x4598c7 [ 653.022085][T15288] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.041777][T15288] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.050280][T15288] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 653.058229][T15288] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 653.066419][T15288] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 03:07:49 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x4788}}}}]}, 0x48}}, 0x0) 03:07:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xc00}}}}]}, 0x48}}, 0x0) 03:07:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 653.075614][T15288] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 653.084083][T15288] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:50 executing program 4 (fault-call:0 fault-nth:22): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 653.264861][T15311] FAULT_INJECTION: forcing a failure. [ 653.264861][T15311] name failslab, interval 1, probability 0, space 0, times 0 [ 653.279531][T15311] CPU: 1 PID: 15311 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 653.288805][T15311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.299322][T15311] Call Trace: [ 653.302607][T15311] dump_stack+0x1d8/0x2f8 [ 653.302623][T15311] should_fail+0x555/0x770 [ 653.302639][T15311] __should_failslab+0x11a/0x160 [ 653.302652][T15311] ? __kernfs_new_node+0x97/0x6b0 [ 653.302667][T15311] should_failslab+0x9/0x20 [ 653.311415][T15311] kmem_cache_alloc+0x56/0x2e0 [ 653.311432][T15311] __kernfs_new_node+0x97/0x6b0 [ 653.311445][T15311] ? __schedule+0x7e3/0xb80 [ 653.311457][T15311] ? bd_set_size+0x97/0xb0 [ 653.311474][T15311] kernfs_create_dir_ns+0x9b/0x230 [ 653.311486][T15311] internal_create_group+0x207/0xd80 [ 653.311511][T15311] sysfs_create_group+0x1f/0x30 [ 653.321444][T15311] loop_set_fd+0xf54/0x1470 [ 653.321469][T15311] lo_ioctl+0xd5/0x2200 [ 653.321479][T15311] ? __kasan_slab_free+0x12a/0x1e0 [ 653.321487][T15311] ? kasan_slab_free+0xe/0x10 [ 653.321495][T15311] ? kfree+0x115/0x200 [ 653.321505][T15311] ? tomoyo_path_number_perm+0x4e1/0x640 [ 653.321515][T15311] ? tomoyo_file_ioctl+0x23/0x30 [ 653.331220][T15311] ? security_file_ioctl+0x6d/0xd0 [ 653.331231][T15311] ? __x64_sys_ioctl+0xa3/0x120 [ 653.331242][T15311] ? do_syscall_64+0xf7/0x1c0 [ 653.331253][T15311] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.331269][T15311] ? debug_check_no_obj_freed+0x505/0x5b0 [ 653.331294][T15311] ? rcu_lock_release+0x9/0x30 [ 653.340965][T15311] ? rcu_lock_release+0x9/0x30 [ 653.340979][T15311] ? lo_release+0x1f0/0x1f0 [ 653.340990][T15311] blkdev_ioctl+0x807/0x2980 [ 653.341003][T15311] ? tomoyo_path_number_perm+0x53e/0x640 [ 653.350528][T15311] block_ioctl+0xbd/0x100 [ 653.350538][T15311] ? blkdev_iopoll+0x100/0x100 [ 653.350551][T15311] do_vfs_ioctl+0x744/0x1730 [ 653.360654][T15311] ? __fget+0x4b1/0x510 [ 653.360673][T15311] ? tomoyo_file_ioctl+0x23/0x30 [ 653.360686][T15311] ? security_file_ioctl+0xa1/0xd0 [ 653.360699][T15311] __x64_sys_ioctl+0xe3/0x120 [ 653.369518][T15311] do_syscall_64+0xf7/0x1c0 [ 653.369535][T15311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.369543][T15311] RIP: 0033:0x4598c7 [ 653.369554][T15311] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.380336][T15311] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.380347][T15311] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 653.380353][T15311] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 653.380359][T15311] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 653.380365][T15311] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 653.380371][T15311] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 653.386425][T15307] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 653.600955][T15304] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 653.611851][T15304] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x4888}}}}]}, 0x48}}, 0x0) 03:07:50 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000004c0)=0xc) r3 = getuid() fstat(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file1\x00', 0x7, 0x4, &(0x7f0000000440)=[{&(0x7f00000001c0)="c094eb7b264d8a304966830e45beb4f44c150504d842999a0047fc0a7459a04af2e4d4b60b661b48b17f2f6947c2f26e86eeb5d986b624d2f45cf0ef0401c6be055bb0206e870de2b515354a3f275c55fbac4d1d7857ede8db0bb46ec12f9f74880d5e52599ed7eac34a3510a26e9d8b4e175fe33e4bbb50eb716ff30088bf73", 0x80, 0x1000}, {&(0x7f00000002c0)="85faaa40b4abcbb3a6eb3ce0e569adf0ba03a2fa8ac32a284a55ae1d8ff59176d58de7fa473127b4940b1fbc9eca4e8bab5ba1cf89263a16aa4602ba52091c717360838635d1808f1082cbcb45c1a1676fab4ecb0acc0ceeb94fdd69e27cc288331976642e7bd1bc8ca06a2587fa6254effb16596bdaa200e19619aeca70afb2995acf31b58299f6545da9e89315", 0x8e, 0x20}, {&(0x7f0000000380)="21301d0bb1750b7f50973491d6941830932d123f8fde3994fe0872b72e9d69be208c36f06cd55ef8c77f34b6585ab1fb17b8617b065c0d63d23ca9d13fe518a7bd8374a3aee4f9ad809531ef2c4bf35a42bbfa9d6718ab", 0x57, 0x8}, {&(0x7f00000000c0)="3f61f914d5cbada52a80a3b33057c1b1af302e018ca6d180ae75a87e4776003d530a99c28f661404367822d7247b4cc61c2f0b6d54a1", 0x36, 0x7fff}], 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fault_injection=0x0000000000000008,fowner<', @ANYRESDEC=r2, @ANYBLOB=',context=user_u,smackfshat=lowerdir,smackfsdef=,obj_type=lowerdir,uid>', @ANYRESDEC=r3, @ANYBLOB="2c736d61636b66737472616e736d7574653d6c6f7765726469722c7365636c6162656c2c736d61636b66737472616e736d9074653d6f7665726c6179002c657569643c", @ANYRESDEC=r4, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2fe669008031b1be49513e4e1d30342c6c6f7765726469707269723d2e2f66696c6570793d07000000000000"]) 03:07:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xf00}}}}]}, 0x48}}, 0x0) 03:07:50 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xcbeadedb}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x19000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:50 executing program 4 (fault-call:0 fault-nth:23): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 653.813883][T15334] FAULT_INJECTION: forcing a failure. [ 653.813883][T15334] name failslab, interval 1, probability 0, space 0, times 0 [ 653.827541][T15334] CPU: 0 PID: 15334 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 653.835528][T15334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.835534][T15334] Call Trace: [ 653.835551][T15334] dump_stack+0x1d8/0x2f8 [ 653.835567][T15334] should_fail+0x555/0x770 [ 653.835585][T15334] __should_failslab+0x11a/0x160 [ 653.835598][T15334] ? __kernfs_new_node+0x97/0x6b0 [ 653.835609][T15334] should_failslab+0x9/0x20 [ 653.835619][T15334] kmem_cache_alloc+0x56/0x2e0 [ 653.835633][T15334] __kernfs_new_node+0x97/0x6b0 [ 653.835649][T15334] ? __kasan_check_write+0x14/0x20 [ 653.835659][T15334] ? __mutex_unlock_slowpath+0x13c/0x5b0 [ 653.835675][T15334] kernfs_new_node+0x97/0x170 [ 653.835690][T15334] __kernfs_create_file+0x4a/0x2f0 [ 653.835704][T15334] sysfs_add_file_mode_ns+0x2dc/0x3a0 [ 653.835722][T15334] internal_create_group+0x4be/0xd80 [ 653.835746][T15334] sysfs_create_group+0x1f/0x30 [ 653.853494][T15334] loop_set_fd+0xf54/0x1470 [ 653.853517][T15334] lo_ioctl+0xd5/0x2200 [ 653.862927][T15334] ? __kasan_slab_free+0x12a/0x1e0 [ 653.862935][T15334] ? kasan_slab_free+0xe/0x10 [ 653.862944][T15334] ? kfree+0x115/0x200 [ 653.862954][T15334] ? tomoyo_path_number_perm+0x4e1/0x640 [ 653.862962][T15334] ? tomoyo_file_ioctl+0x23/0x30 [ 653.862973][T15334] ? security_file_ioctl+0x6d/0xd0 [ 653.862982][T15334] ? __x64_sys_ioctl+0xa3/0x120 [ 653.862992][T15334] ? do_syscall_64+0xf7/0x1c0 [ 653.863003][T15334] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.863019][T15334] ? debug_check_no_obj_freed+0x505/0x5b0 [ 653.863045][T15334] ? rcu_lock_release+0x9/0x30 [ 653.863065][T15334] ? rcu_lock_release+0x9/0x30 [ 653.872552][T15334] ? lo_release+0x1f0/0x1f0 [ 653.872566][T15334] blkdev_ioctl+0x807/0x2980 [ 653.872583][T15334] ? tomoyo_path_number_perm+0x53e/0x640 [ 653.882192][T15334] block_ioctl+0xbd/0x100 [ 653.882202][T15334] ? blkdev_iopoll+0x100/0x100 [ 653.882213][T15334] do_vfs_ioctl+0x744/0x1730 [ 653.882222][T15334] ? __fget+0x4b1/0x510 [ 653.882236][T15334] ? tomoyo_file_ioctl+0x23/0x30 [ 653.882250][T15334] ? security_file_ioctl+0xa1/0xd0 [ 653.882266][T15334] __x64_sys_ioctl+0xe3/0x120 [ 653.909283][T15334] do_syscall_64+0xf7/0x1c0 [ 653.909298][T15334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 653.909309][T15334] RIP: 0033:0x4598c7 [ 653.919421][T15334] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.919427][T15334] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.919436][T15334] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 653.919445][T15334] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 653.933149][T15334] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 653.933156][T15334] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 653.933162][T15334] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 653.983483][T15341] overlayfs: missing 'lowerdir' [ 654.151235][ C1] net_ratelimit: 16 callbacks suppressed [ 654.151241][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:07:51 executing program 4 (fault-call:0 fault-nth:24): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 654.163235][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 654.180123][T15328] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 654.189926][T15328] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x5865}}}}]}, 0x48}}, 0x0) [ 654.294691][T15340] overlayfs: missing 'lowerdir' [ 654.311207][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 654.317019][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 654.322907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 654.328676][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:51 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0x2, 0x80005, 0x0) ioctl(r0, 0x2, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) shmget(0x2, 0x2000, 0x1420, &(0x7f0000ffd000/0x2000)=nil) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on='metacopy=on'}]}) 03:07:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x1100}}}}]}, 0x48}}, 0x0) 03:07:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xdbdeeacb}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 654.361008][T15351] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 654.370523][T15350] FAULT_INJECTION: forcing a failure. [ 654.370523][T15350] name failslab, interval 1, probability 0, space 0, times 0 [ 654.378487][T15351] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 654.418811][T15350] CPU: 0 PID: 15350 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 654.426739][T15350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.436784][T15350] Call Trace: [ 654.440115][T15350] dump_stack+0x1d8/0x2f8 [ 654.444530][T15350] should_fail+0x555/0x770 [ 654.448947][T15350] __should_failslab+0x11a/0x160 [ 654.448962][T15350] ? __kernfs_new_node+0x97/0x6b0 [ 654.448972][T15350] should_failslab+0x9/0x20 [ 654.448986][T15350] kmem_cache_alloc+0x56/0x2e0 [ 654.458913][T15350] __kernfs_new_node+0x97/0x6b0 [ 654.458931][T15350] ? mutex_unlock+0xd/0x10 [ 654.458940][T15350] ? kernfs_activate+0x4c7/0x4e0 [ 654.458955][T15350] kernfs_new_node+0x97/0x170 [ 654.468178][T15350] __kernfs_create_file+0x4a/0x2f0 [ 654.468193][T15350] sysfs_add_file_mode_ns+0x2dc/0x3a0 [ 654.468217][T15350] internal_create_group+0x4be/0xd80 [ 654.477458][T15350] sysfs_create_group+0x1f/0x30 [ 654.477471][T15350] loop_set_fd+0xf54/0x1470 [ 654.477492][T15350] lo_ioctl+0xd5/0x2200 03:07:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x25000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 654.487053][T15350] ? __kasan_slab_free+0x12a/0x1e0 [ 654.487062][T15350] ? kasan_slab_free+0xe/0x10 [ 654.487072][T15350] ? kfree+0x115/0x200 [ 654.487083][T15350] ? tomoyo_path_number_perm+0x4e1/0x640 [ 654.487089][T15350] ? tomoyo_file_ioctl+0x23/0x30 [ 654.487103][T15350] ? security_file_ioctl+0x6d/0xd0 [ 654.497534][T15350] ? __x64_sys_ioctl+0xa3/0x120 [ 654.497546][T15350] ? do_syscall_64+0xf7/0x1c0 [ 654.497559][T15350] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.497574][T15350] ? debug_check_no_obj_freed+0x505/0x5b0 [ 654.497599][T15350] ? rcu_lock_release+0x9/0x30 [ 654.507692][T15350] ? rcu_lock_release+0x9/0x30 [ 654.507707][T15350] ? lo_release+0x1f0/0x1f0 [ 654.507717][T15350] blkdev_ioctl+0x807/0x2980 [ 654.507730][T15350] ? tomoyo_path_number_perm+0x53e/0x640 [ 654.516374][T15350] block_ioctl+0xbd/0x100 [ 654.516384][T15350] ? blkdev_iopoll+0x100/0x100 [ 654.516397][T15350] do_vfs_ioctl+0x744/0x1730 [ 654.526153][T15350] ? __fget+0x4b1/0x510 [ 654.526171][T15350] ? tomoyo_file_ioctl+0x23/0x30 [ 654.526185][T15350] ? security_file_ioctl+0xa1/0xd0 [ 654.526199][T15350] __x64_sys_ioctl+0xe3/0x120 [ 654.535846][T15350] do_syscall_64+0xf7/0x1c0 [ 654.535861][T15350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 654.535870][T15350] RIP: 0033:0x4598c7 [ 654.535881][T15350] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.535886][T15350] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.535896][T15350] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 654.535902][T15350] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 654.535908][T15350] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 654.535914][T15350] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 654.535918][T15350] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 654.707509][T15360] overlayfs: conflicting lowerdir path [ 654.713476][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 654.713512][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:07:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:51 executing program 4 (fault-call:0 fault-nth:25): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000800950000000000000005a01800005dfb8000100000009500000000800000000000c09baa220c260ad5f2337898a1953c93"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x5, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='c', 0x300, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffc, r2, 0x0) r4 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='overlay\x00', r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xefd, 0x0, &(0x7f0000000a80)="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", 0x0, 0x3}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65312c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c0008aea7ae8adf80ca895d88fcda31c9bd994c5e4121e54e4d82eb8c80e0faac8fd945c1ace51779427441da863af0a4f685556c4bba489771067bac1a92ba409db84f9a69f6a21b5ca830d5b636fc1264a530e6414378160858f251c9ec72cc7768c810abbfa75bd92e3d69fafac70e964e3538cf733e7ddf184032f3b3ab5f5f0f14e08f8cddfbf04d638e09b2024fd2f66025511cafb25a50a92ae1daf498350d336eeec43b402d0a01d96aaee9af325ee72b23e334f1236899cd430f7bdd33fba16ce54c3817"]) [ 654.871206][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 654.877067][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x1200}}}}]}, 0x48}}, 0x0) 03:07:51 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x6000}}}}]}, 0x48}}, 0x0) 03:07:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 655.016580][T15385] FAULT_INJECTION: forcing a failure. [ 655.016580][T15385] name failslab, interval 1, probability 0, space 0, times 0 [ 655.046947][T15385] CPU: 0 PID: 15385 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 655.054878][T15385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.064959][T15385] Call Trace: [ 655.068267][T15385] dump_stack+0x1d8/0x2f8 [ 655.072594][T15385] should_fail+0x555/0x770 [ 655.077022][T15385] __should_failslab+0x11a/0x160 [ 655.081958][T15385] ? __kernfs_new_node+0x97/0x6b0 [ 655.086975][T15385] should_failslab+0x9/0x20 [ 655.091466][T15385] kmem_cache_alloc+0x56/0x2e0 [ 655.091484][T15385] __kernfs_new_node+0x97/0x6b0 [ 655.091499][T15385] ? mutex_unlock+0xd/0x10 [ 655.091507][T15385] ? kernfs_activate+0x4c7/0x4e0 [ 655.091521][T15385] kernfs_new_node+0x97/0x170 [ 655.091533][T15385] __kernfs_create_file+0x4a/0x2f0 [ 655.091545][T15385] sysfs_add_file_mode_ns+0x2dc/0x3a0 [ 655.101127][T15385] internal_create_group+0x4be/0xd80 [ 655.101149][T15385] sysfs_create_group+0x1f/0x30 [ 655.101160][T15385] loop_set_fd+0xf54/0x1470 [ 655.101180][T15385] lo_ioctl+0xd5/0x2200 [ 655.101189][T15385] ? __kasan_slab_free+0x12a/0x1e0 [ 655.101196][T15385] ? kasan_slab_free+0xe/0x10 [ 655.101209][T15385] ? kfree+0x115/0x200 [ 655.110546][T15385] ? tomoyo_path_number_perm+0x4e1/0x640 [ 655.110554][T15385] ? tomoyo_file_ioctl+0x23/0x30 [ 655.110564][T15385] ? security_file_ioctl+0x6d/0xd0 [ 655.110577][T15385] ? __x64_sys_ioctl+0xa3/0x120 [ 655.120327][T15385] ? do_syscall_64+0xf7/0x1c0 [ 655.120339][T15385] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 655.120356][T15385] ? debug_check_no_obj_freed+0x505/0x5b0 [ 655.130988][T15385] ? rcu_lock_release+0x9/0x30 [ 655.140297][T15385] ? rcu_lock_release+0x9/0x30 [ 655.149507][T15385] ? lo_release+0x1f0/0x1f0 [ 655.158203][T15385] blkdev_ioctl+0x807/0x2980 03:07:52 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) accept(r0, &(0x7f00000001c0)=@generic, &(0x7f00000000c0)=0x80) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469523d2e2f66696c65312c03000000000000003d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c00"]) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x10000) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000080)=0x7) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) [ 655.168742][T15385] ? tomoyo_path_number_perm+0x53e/0x640 [ 655.178694][T15385] block_ioctl+0xbd/0x100 [ 655.189419][T15385] ? blkdev_iopoll+0x100/0x100 [ 655.204596][T15385] do_vfs_ioctl+0x744/0x1730 [ 655.213641][T15385] ? __fget+0x4b1/0x510 [ 655.213658][T15385] ? tomoyo_file_ioctl+0x23/0x30 [ 655.213671][T15385] ? security_file_ioctl+0xa1/0xd0 [ 655.213684][T15385] __x64_sys_ioctl+0xe3/0x120 [ 655.213698][T15385] do_syscall_64+0xf7/0x1c0 [ 655.213711][T15385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 655.213719][T15385] RIP: 0033:0x4598c7 [ 655.213729][T15385] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 655.213734][T15385] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.213749][T15385] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 655.223668][T15385] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 655.233082][T15385] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 655.233088][T15385] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 655.233093][T15385] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x1300}}}}]}, 0x48}}, 0x0) [ 655.390395][T15402] overlayfs: unrecognized mount option "upperdiR=./file1" or missing value 03:07:52 executing program 4 (fault-call:0 fault-nth:26): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 655.469020][T15402] overlayfs: unrecognized mount option "upperdiR=./file1" or missing value 03:07:52 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = accept4$rose(r1, &(0x7f0000000040)=@full={0xb, @dev, @netrom, 0x0, [@null, @netrom, @null, @default, @bcast, @bcast]}, &(0x7f0000000080)=0x40, 0x80000) accept4(r2, &(0x7f00000001c0)=@xdp, &(0x7f00000000c0)=0x80, 0x40000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 655.541964][T15417] FAULT_INJECTION: forcing a failure. [ 655.541964][T15417] name failslab, interval 1, probability 0, space 0, times 0 [ 655.572834][T15417] CPU: 1 PID: 15417 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 655.580780][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.590838][T15417] Call Trace: [ 655.590857][T15417] dump_stack+0x1d8/0x2f8 [ 655.590873][T15417] should_fail+0x555/0x770 [ 655.590892][T15417] __should_failslab+0x11a/0x160 [ 655.590907][T15417] should_failslab+0x9/0x20 [ 655.607813][T15417] kmem_cache_alloc_trace+0x5d/0x2f0 [ 655.607826][T15417] ? kobject_uevent_env+0x2cd/0x1260 [ 655.607838][T15417] ? dev_uevent_filter+0xb0/0xb0 [ 655.607850][T15417] kobject_uevent_env+0x2cd/0x1260 [ 655.607869][T15417] kobject_uevent+0x1f/0x30 [ 655.617608][T15417] loop_set_fd+0xfc3/0x1470 03:07:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4c000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 655.617632][T15417] lo_ioctl+0xd5/0x2200 [ 655.617642][T15417] ? __kasan_slab_free+0x12a/0x1e0 [ 655.617650][T15417] ? kasan_slab_free+0xe/0x10 [ 655.617661][T15417] ? kfree+0x115/0x200 [ 655.628023][T15417] ? tomoyo_path_number_perm+0x4e1/0x640 [ 655.628032][T15417] ? tomoyo_file_ioctl+0x23/0x30 [ 655.628044][T15417] ? security_file_ioctl+0x6d/0xd0 [ 655.628054][T15417] ? __x64_sys_ioctl+0xa3/0x120 [ 655.628068][T15417] ? do_syscall_64+0xf7/0x1c0 [ 655.637635][T15417] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:07:52 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 655.637653][T15417] ? debug_check_no_obj_freed+0x505/0x5b0 [ 655.637680][T15417] ? rcu_lock_release+0x9/0x30 [ 655.637696][T15417] ? rcu_lock_release+0x9/0x30 [ 655.646304][T15417] ? lo_release+0x1f0/0x1f0 [ 655.646317][T15417] blkdev_ioctl+0x807/0x2980 [ 655.646333][T15417] ? tomoyo_path_number_perm+0x53e/0x640 [ 655.646363][T15417] block_ioctl+0xbd/0x100 [ 655.656087][T15417] ? blkdev_iopoll+0x100/0x100 [ 655.656102][T15417] do_vfs_ioctl+0x744/0x1730 [ 655.656112][T15417] ? __fget+0x4b1/0x510 [ 655.656128][T15417] ? tomoyo_file_ioctl+0x23/0x30 [ 655.656142][T15417] ? security_file_ioctl+0xa1/0xd0 [ 655.665792][T15417] __x64_sys_ioctl+0xe3/0x120 [ 655.665806][T15417] do_syscall_64+0xf7/0x1c0 [ 655.665822][T15417] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 655.665831][T15417] RIP: 0033:0x4598c7 [ 655.665842][T15417] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 655.665848][T15417] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.665857][T15417] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 655.665866][T15417] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 655.675865][T15417] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 655.675872][T15417] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 655.675878][T15417] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x6558}}}}]}, 0x48}}, 0x0) 03:07:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:52 executing program 4 (fault-call:0 fault-nth:27): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:52 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r4, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x1400}}}}]}, 0x48}}, 0x0) [ 656.065725][T15446] FAULT_INJECTION: forcing a failure. [ 656.065725][T15446] name failslab, interval 1, probability 0, space 0, times 0 [ 656.096745][T15446] CPU: 1 PID: 15446 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 656.104677][T15446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.104684][T15446] Call Trace: [ 656.104708][T15446] dump_stack+0x1d8/0x2f8 [ 656.104724][T15446] should_fail+0x555/0x770 [ 656.104741][T15446] __should_failslab+0x11a/0x160 [ 656.131918][T15446] ? kzalloc+0x26/0x40 [ 656.135991][T15446] should_failslab+0x9/0x20 [ 656.140486][T15446] __kmalloc+0x7a/0x340 [ 656.144637][T15446] kzalloc+0x26/0x40 [ 656.148532][T15446] kobject_get_path+0xa7/0x1d0 [ 656.153302][T15446] kobject_uevent_env+0x2f2/0x1260 [ 656.153326][T15446] kobject_uevent+0x1f/0x30 03:07:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xf1ffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 656.153339][T15446] loop_set_fd+0xfc3/0x1470 [ 656.153361][T15446] lo_ioctl+0xd5/0x2200 [ 656.153374][T15446] ? __kasan_slab_free+0x12a/0x1e0 [ 656.162966][T15446] ? kasan_slab_free+0xe/0x10 [ 656.162976][T15446] ? kfree+0x115/0x200 [ 656.162987][T15446] ? tomoyo_path_number_perm+0x4e1/0x640 [ 656.162996][T15446] ? tomoyo_file_ioctl+0x23/0x30 [ 656.163007][T15446] ? security_file_ioctl+0x6d/0xd0 [ 656.163017][T15446] ? __x64_sys_ioctl+0xa3/0x120 [ 656.163026][T15446] ? do_syscall_64+0xf7/0x1c0 [ 656.163038][T15446] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.163053][T15446] ? debug_check_no_obj_freed+0x505/0x5b0 [ 656.163077][T15446] ? rcu_lock_release+0x9/0x30 [ 656.171705][T15446] ? rcu_lock_release+0x9/0x30 [ 656.171720][T15446] ? lo_release+0x1f0/0x1f0 [ 656.171732][T15446] blkdev_ioctl+0x807/0x2980 [ 656.171745][T15446] ? tomoyo_path_number_perm+0x53e/0x640 [ 656.171775][T15446] block_ioctl+0xbd/0x100 [ 656.171786][T15446] ? blkdev_iopoll+0x100/0x100 [ 656.181531][T15446] do_vfs_ioctl+0x744/0x1730 [ 656.181542][T15446] ? __fget+0x4b1/0x510 [ 656.181558][T15446] ? tomoyo_file_ioctl+0x23/0x30 [ 656.181572][T15446] ? security_file_ioctl+0xa1/0xd0 [ 656.181584][T15446] __x64_sys_ioctl+0xe3/0x120 [ 656.181599][T15446] do_syscall_64+0xf7/0x1c0 [ 656.181618][T15446] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.191262][T15446] RIP: 0033:0x4598c7 [ 656.191273][T15446] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.191279][T15446] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.191289][T15446] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 656.191296][T15446] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 656.191302][T15446] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 656.191308][T15446] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 656.191314][T15446] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 656.266835][T15453] overlayfs: bad mount option "redirect_dir=./file0" 03:07:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x8100}}}}]}, 0x48}}, 0x0) 03:07:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65580000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x1800}}}}]}, 0x48}}, 0x0) 03:07:53 executing program 4 (fault-call:0 fault-nth:28): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 656.585675][T15474] FAULT_INJECTION: forcing a failure. [ 656.585675][T15474] name failslab, interval 1, probability 0, space 0, times 0 [ 656.601689][T15474] CPU: 0 PID: 15474 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 656.609617][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.609622][T15474] Call Trace: [ 656.609639][T15474] dump_stack+0x1d8/0x2f8 [ 656.609657][T15474] should_fail+0x555/0x770 [ 656.627293][T15474] __should_failslab+0x11a/0x160 [ 656.627307][T15474] ? __kernfs_new_node+0x97/0x6b0 [ 656.627318][T15474] should_failslab+0x9/0x20 [ 656.627330][T15474] kmem_cache_alloc+0x56/0x2e0 [ 656.636650][T15474] __kernfs_new_node+0x97/0x6b0 [ 656.636668][T15474] ? mutex_unlock+0xd/0x10 [ 656.636677][T15474] ? kernfs_activate+0x4c7/0x4e0 [ 656.636692][T15474] kernfs_new_node+0x97/0x170 [ 656.646191][T15474] __kernfs_create_file+0x4a/0x2f0 [ 656.655757][T15474] sysfs_add_file_mode_ns+0x2dc/0x3a0 [ 656.655782][T15474] internal_create_group+0x4be/0xd80 [ 656.655803][T15474] sysfs_create_group+0x1f/0x30 [ 656.665101][T15474] loop_set_fd+0xf54/0x1470 [ 656.665122][T15474] lo_ioctl+0xd5/0x2200 [ 656.665131][T15474] ? __kasan_slab_free+0x12a/0x1e0 [ 656.665139][T15474] ? kasan_slab_free+0xe/0x10 [ 656.665158][T15474] ? kfree+0x115/0x200 [ 656.665168][T15474] ? tomoyo_path_number_perm+0x4e1/0x640 [ 656.665175][T15474] ? tomoyo_file_ioctl+0x23/0x30 [ 656.665185][T15474] ? security_file_ioctl+0x6d/0xd0 [ 656.665195][T15474] ? __x64_sys_ioctl+0xa3/0x120 [ 656.665205][T15474] ? do_syscall_64+0xf7/0x1c0 [ 656.665218][T15474] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.665232][T15474] ? debug_check_no_obj_freed+0x505/0x5b0 [ 656.665256][T15474] ? rcu_lock_release+0x9/0x30 [ 656.674997][T15474] ? rcu_lock_release+0x9/0x30 [ 656.685592][T15474] ? lo_release+0x1f0/0x1f0 [ 656.685603][T15474] blkdev_ioctl+0x807/0x2980 [ 656.685618][T15474] ? tomoyo_path_number_perm+0x53e/0x640 [ 656.685650][T15474] block_ioctl+0xbd/0x100 [ 656.685659][T15474] ? blkdev_iopoll+0x100/0x100 [ 656.685671][T15474] do_vfs_ioctl+0x744/0x1730 [ 656.685678][T15474] ? __fget+0x4b1/0x510 [ 656.685692][T15474] ? tomoyo_file_ioctl+0x23/0x30 [ 656.699146][T15474] ? security_file_ioctl+0xa1/0xd0 [ 656.699162][T15474] __x64_sys_ioctl+0xe3/0x120 [ 656.699176][T15474] do_syscall_64+0xf7/0x1c0 [ 656.699192][T15474] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.708926][T15474] RIP: 0033:0x4598c7 [ 656.708937][T15474] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.708942][T15474] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.708953][T15474] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 656.708959][T15474] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 656.708965][T15474] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 656.708970][T15474] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 03:07:53 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 656.708979][T15474] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:53 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 656.939269][T15482] overlayfs: bad mount option "redirect_dir=./file0" 03:07:53 executing program 4 (fault-call:0 fault-nth:29): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:53 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) uselib(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0xa, 0x100000001, 0x7}, 0xd) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000400), 0x0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @initdev}, &(0x7f0000000500)=0xc) sendmsg$sock(r3, &(0x7f0000000800)={&(0x7f0000000540)=@hci={0x1f, r5}, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)="779fb7199bf92d5d3e1b88900792d3d12049ff35e8cb3b50c2750cf231dd47cb967eeb15bf6ae3b030a0e3c02cccdd2f7c0232b348b90be4bfbe6de53f94491f7ce34b9d091b62acec22d1abebbf6624bc3ef914f68ee965b16f8b342ea4648a65caa8eea251e0cffdda26caa506104fc42093b1f02a9383b9d6a3caf52f5e28e580de611759ae6e2b531027e738cbfd90b9251c87032a59abcaf3fe38cbd10a4e7e96cee5a702928f16fcbebfc81aa673d29f70297d529f3ae812e10c69df2c901c4a31b7887fb2427dfc8d22a4e2ac56f2d99f93", 0xd5}, {&(0x7f00000006c0)="1de4d5f27f1eb2d844020135df3ff3cacfdf9aeb3865", 0x16}, {&(0x7f0000000700)="a437fd", 0x3}], 0x3, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x84}}], 0x48}, 0x8010) r6 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x1, 0x240000) fanotify_mark(r2, 0x4, 0x8, r6, &(0x7f0000000200)='./file0\x00') kcmp(r0, 0x0, 0x0, 0xffffffffffffffff, r1) r7 = syz_open_procfs(r0, &(0x7f0000000040)='net/stat\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r8, 0x0, 0x0) write$sndseq(r8, &(0x7f00000002c0)=[{0x4, 0x0, 0x2e, 0x5, @tick=0xbbc0, {0x7, 0x4}, {0x68, 0x1}, @quote={{0x35, 0x1}, 0x5, &(0x7f0000000140)={0x9, 0x80, 0xff, 0x80, @time={0x0, 0x1c9c380}, {0x1, 0x8}, {0xff, 0x7}, @addr={0xfc, 0x7b}}}}, {0x9, 0xd8, 0x7f, 0xa, @time={0x0, 0x989680}, {0x0, 0x5}, {0x1, 0x5}, @raw32={[0x1, 0x6, 0x7]}}, {0x20, 0x91, 0x1, 0x1, @tick=0x81, {0xff, 0x9}, {}, @connect={{0x4c, 0xa4}, {0x48, 0x9b}}}], 0x90) write$P9_RREADLINK(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000017020007002e3c9191475c022f8a6c896931"], 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x3f00}}}}]}, 0x48}}, 0x0) [ 657.128653][T15496] FAULT_INJECTION: forcing a failure. [ 657.128653][T15496] name failslab, interval 1, probability 0, space 0, times 0 [ 657.128690][T15493] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6c000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:54 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 657.171765][T15496] CPU: 0 PID: 15496 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 657.179690][T15496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.189755][T15496] Call Trace: [ 657.193051][T15496] dump_stack+0x1d8/0x2f8 [ 657.197380][T15496] should_fail+0x555/0x770 [ 657.201801][T15496] __should_failslab+0x11a/0x160 [ 657.206748][T15496] should_failslab+0x9/0x20 [ 657.211249][T15496] kmem_cache_alloc_trace+0x5d/0x2f0 [ 657.216530][T15496] ? kobject_uevent_env+0x2cd/0x1260 [ 657.221803][T15496] ? dev_uevent_filter+0xb0/0xb0 03:07:54 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x40020a) write$cgroup_int(r1, &(0x7f0000000080), 0x12) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000280)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000300)=""/205, 0xcd}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x8, &(0x7f0000000140)=']') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = getuid() mount$overlay(0x400000, &(0x7f0000000200)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[], [{@fowner_gt={'fowner>', r2}}, {@appraise='appraise'}]}) [ 657.226738][T15496] kobject_uevent_env+0x2cd/0x1260 [ 657.231856][T15496] kobject_uevent+0x1f/0x30 [ 657.236352][T15496] loop_set_fd+0xfc3/0x1470 [ 657.236375][T15496] lo_ioctl+0xd5/0x2200 [ 657.245016][T15496] ? __kasan_slab_free+0x12a/0x1e0 [ 657.245025][T15496] ? kasan_slab_free+0xe/0x10 [ 657.245035][T15496] ? kfree+0x115/0x200 [ 657.245049][T15496] ? tomoyo_path_number_perm+0x4e1/0x640 [ 657.264481][T15496] ? tomoyo_file_ioctl+0x23/0x30 [ 657.269415][T15496] ? security_file_ioctl+0x6d/0xd0 [ 657.269426][T15496] ? __x64_sys_ioctl+0xa3/0x120 [ 657.269435][T15496] ? do_syscall_64+0xf7/0x1c0 [ 657.269448][T15496] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.279388][T15496] ? debug_check_no_obj_freed+0x505/0x5b0 [ 657.279415][T15496] ? rcu_lock_release+0x9/0x30 [ 657.279431][T15496] ? rcu_lock_release+0x9/0x30 [ 657.290159][T15496] ? lo_release+0x1f0/0x1f0 [ 657.290171][T15496] blkdev_ioctl+0x807/0x2980 [ 657.290189][T15496] ? tomoyo_path_number_perm+0x53e/0x640 [ 657.300656][T15496] block_ioctl+0xbd/0x100 [ 657.300665][T15496] ? blkdev_iopoll+0x100/0x100 03:07:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x8847}}}}]}, 0x48}}, 0x0) [ 657.300678][T15496] do_vfs_ioctl+0x744/0x1730 [ 657.309894][T15496] ? __fget+0x4b1/0x510 [ 657.320093][T15496] ? tomoyo_file_ioctl+0x23/0x30 [ 657.320107][T15496] ? security_file_ioctl+0xa1/0xd0 [ 657.320121][T15496] __x64_sys_ioctl+0xe3/0x120 [ 657.333748][T15496] do_syscall_64+0xf7/0x1c0 [ 657.333765][T15496] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.333775][T15496] RIP: 0033:0x4598c7 [ 657.333784][T15496] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.333789][T15496] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.333798][T15496] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 657.333803][T15496] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 657.333808][T15496] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 657.333814][T15496] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 657.333819][T15496] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x74000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:54 executing program 4 (fault-call:0 fault-nth:30): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 657.531507][T15515] overlayfs: unrecognized mount option "fowner>00000000000000000000" or missing value [ 657.599367][T15522] FAULT_INJECTION: forcing a failure. [ 657.599367][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 657.628059][T15522] CPU: 1 PID: 15522 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 657.636032][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.646091][T15522] Call Trace: [ 657.649387][T15522] dump_stack+0x1d8/0x2f8 [ 657.653798][T15522] should_fail+0x555/0x770 [ 657.658226][T15522] __should_failslab+0x11a/0x160 [ 657.663162][T15522] ? skb_clone+0x1cc/0x380 [ 657.667569][T15522] should_failslab+0x9/0x20 [ 657.672067][T15522] kmem_cache_alloc+0x56/0x2e0 [ 657.676820][T15522] skb_clone+0x1cc/0x380 [ 657.681046][T15522] netlink_broadcast_filtered+0x619/0x1080 [ 657.686837][T15522] netlink_broadcast+0x3a/0x50 [ 657.691594][T15522] kobject_uevent_env+0xcf0/0x1260 [ 657.696707][T15522] kobject_uevent+0x1f/0x30 [ 657.701208][T15522] loop_set_fd+0xfc3/0x1470 [ 657.705693][T15522] lo_ioctl+0xd5/0x2200 [ 657.709828][T15522] ? __kasan_slab_free+0x12a/0x1e0 [ 657.715091][T15522] ? kasan_slab_free+0xe/0x10 [ 657.719799][T15522] ? kfree+0x115/0x200 [ 657.723857][T15522] ? tomoyo_path_number_perm+0x4e1/0x640 [ 657.729479][T15522] ? tomoyo_file_ioctl+0x23/0x30 [ 657.734508][T15522] ? security_file_ioctl+0x6d/0xd0 [ 657.739617][T15522] ? __x64_sys_ioctl+0xa3/0x120 [ 657.744473][T15522] ? do_syscall_64+0xf7/0x1c0 [ 657.749162][T15522] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.755225][T15522] ? debug_check_no_obj_freed+0x505/0x5b0 [ 657.760954][T15522] ? rcu_lock_release+0x9/0x30 [ 657.765743][T15522] ? rcu_lock_release+0x9/0x30 [ 657.770499][T15522] ? lo_release+0x1f0/0x1f0 [ 657.774988][T15522] blkdev_ioctl+0x807/0x2980 [ 657.779644][T15522] ? tomoyo_path_number_perm+0x53e/0x640 [ 657.785333][T15522] block_ioctl+0xbd/0x100 [ 657.789649][T15522] ? blkdev_iopoll+0x100/0x100 [ 657.794407][T15522] do_vfs_ioctl+0x744/0x1730 [ 657.798972][T15522] ? __fget+0x4b1/0x510 [ 657.803105][T15522] ? tomoyo_file_ioctl+0x23/0x30 [ 657.808025][T15522] ? security_file_ioctl+0xa1/0xd0 [ 657.813127][T15522] __x64_sys_ioctl+0xe3/0x120 [ 657.817782][T15522] do_syscall_64+0xf7/0x1c0 [ 657.822278][T15522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 657.828144][T15522] RIP: 0033:0x4598c7 [ 657.832016][T15522] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 657.851592][T15522] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.859984][T15522] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 657.867937][T15522] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 657.875883][T15522] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 657.883839][T15522] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 657.891785][T15522] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x4000}}}}]}, 0x48}}, 0x0) [ 657.927104][T15520] validate_nla: 20 callbacks suppressed [ 657.927111][T15520] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 657.953179][T15520] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x8848}}}}]}, 0x48}}, 0x0) 03:07:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7a000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 657.989355][T15515] overlayfs: unrecognized mount option "fowner>00000000000000000000" or missing value 03:07:54 executing program 4 (fault-call:0 fault-nth:31): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 658.123472][T15536] FAULT_INJECTION: forcing a failure. [ 658.123472][T15536] name failslab, interval 1, probability 0, space 0, times 0 [ 658.141304][T15536] CPU: 0 PID: 15536 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 658.149214][T15536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.149220][T15536] Call Trace: [ 658.149236][T15536] dump_stack+0x1d8/0x2f8 [ 658.149252][T15536] should_fail+0x555/0x770 [ 658.171290][T15536] __should_failslab+0x11a/0x160 [ 658.176219][T15536] ? kzalloc+0x26/0x40 [ 658.176231][T15536] should_failslab+0x9/0x20 [ 658.176242][T15536] __kmalloc+0x7a/0x340 [ 658.176255][T15536] kzalloc+0x26/0x40 [ 658.184790][T15536] kobject_get_path+0xa7/0x1d0 [ 658.184803][T15536] kobject_uevent_env+0x2f2/0x1260 [ 658.184823][T15536] kobject_uevent+0x1f/0x30 [ 658.184835][T15536] loop_set_fd+0xfc3/0x1470 [ 658.184858][T15536] lo_ioctl+0xd5/0x2200 [ 658.184866][T15536] ? __kasan_slab_free+0x12a/0x1e0 [ 658.184873][T15536] ? kasan_slab_free+0xe/0x10 [ 658.184881][T15536] ? kfree+0x115/0x200 [ 658.184891][T15536] ? tomoyo_path_number_perm+0x4e1/0x640 [ 658.184900][T15536] ? tomoyo_file_ioctl+0x23/0x30 [ 658.184911][T15536] ? security_file_ioctl+0x6d/0xd0 [ 658.184921][T15536] ? __x64_sys_ioctl+0xa3/0x120 [ 658.184930][T15536] ? do_syscall_64+0xf7/0x1c0 [ 658.184943][T15536] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.197775][T15536] ? debug_check_no_obj_freed+0x505/0x5b0 [ 658.197801][T15536] ? rcu_lock_release+0x9/0x30 [ 658.207374][T15536] ? rcu_lock_release+0x9/0x30 [ 658.207388][T15536] ? lo_release+0x1f0/0x1f0 [ 658.207401][T15536] blkdev_ioctl+0x807/0x2980 [ 658.216013][T15536] ? tomoyo_path_number_perm+0x53e/0x640 [ 658.225767][T15536] block_ioctl+0xbd/0x100 [ 658.225779][T15536] ? blkdev_iopoll+0x100/0x100 [ 658.235430][T15536] do_vfs_ioctl+0x744/0x1730 [ 658.235440][T15536] ? __fget+0x4b1/0x510 [ 658.235455][T15536] ? tomoyo_file_ioctl+0x23/0x30 [ 658.235467][T15536] ? security_file_ioctl+0xa1/0xd0 03:07:55 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x40020a) write$cgroup_int(r2, &(0x7f0000000080), 0x12) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000026c0)=@assoc_id=0x0, &(0x7f0000002700)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086602, 0x40020a) write$cgroup_int(r4, &(0x7f0000000080), 0x12) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000003d00)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0xfff, 0x3, 0x10001, 0x3, 0x101, 0x0, 0x400, 0x3, 0x1, 0x1ff, 0xfff, 0x0, 0x1f27, 0xad, 0xe45]}, &(0x7f0000003e00)=0x100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000003f40)={0x0, 0x1f}, &(0x7f0000003f80)=0x8) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000040)={r9, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000003fc0)={r9, 0xff}, &(0x7f0000004000)=0x8) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r11) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000040)={r13, 0x0, 0x10}, &(0x7f00000000c0)=0x18) sendmmsg$inet_sctp(r1, &(0x7f0000004140)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x7f, @remote, 0x101}, 0x1c, &(0x7f00000015c0)=[{&(0x7f00000001c0)="3a8fbf5b5e218b4fbb09d5d6fdadb2e836baeb79ca15568a241858a294c4cd50147682dcb2936006f9df3023ff3c863bfeccbbf17651b35523f1e37307c4d419fd0f82818c30a244", 0x48}, {&(0x7f00000002c0)="f56c079679a8c2223c38a80d0f3e866c23c59bed699abd78652aa79b8e93e1a8b2458ba9360ed6c154e5e736d59664bbefd2df42e377b0cfab8677308932a803f9a8b04a65e6d192f8504c6754353777ff0c3f", 0x53}, {&(0x7f0000000440)="7b1f0860bf9adf1d4ad370628698775b23055035294065d1984a3b54931cb40d3865db23ea38eaa4b347cf617cf1c9896ee35b7e6971d53fcbf1a4f5b34d1b3bda0a040a416f4d9ba4e0be7e5067af43b7edc84adc1fda9995e875c442ae79dc2ab1bd1077e5a92b947d90971069dba87d6bdd7c9516658825381b90d8a24e90430ee6d37609c8c481ca494f02075e81c333d26533218379aec76267d60d008ecd0caf03107bdfc8bd6fec35df1a250c09609007178347f2c9c664d3a41561a36eb6038412827444dc927171a558423cfd", 0xd1}, {&(0x7f0000000340)="b52ef4ded1244aafe3eda04f3c5dcf387b5113f6ab39065d74f181e5187298e9ef31d2616808362a12c2dbcabbe2f74ff11a37d0c4e3f7100cd47720db87c2f8dd91c4f0f624ae47771c2a33ff16ee6f4b223fafa645c943570752d183c08f7b1a1c695256bdadcd21999d92220611d6274c32e19d7a06e5145de4c244c215d9e0be99aaa4659a0951e4562c1605c006dfffaecf8abbcbba192faed8a0935f2c7b05c56f060abfcb3b055f29c4024e34fe", 0xb1}, {&(0x7f0000000540)="e521d3f966af4c550434672d66cbbc086ade48cd0c0dc0857453ac56d5c8ecbc03175bb5212e18bc6b5ef2ba452578ac93ab33ddf12755b5cb65bfb192663f51c79fc311858d4b1c8ee78119db9ca78d9d7e26363ff66db9beda53", 0x5b}, {&(0x7f0000000140)}, {&(0x7f00000005c0)="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", 0x1000}], 0x7, 0x0, 0x0, 0x4001}, {&(0x7f0000001640)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002680)=[{&(0x7f0000001680)="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", 0x1000}], 0x1, &(0x7f0000004280)=ANY=[@ANYBLOB="200000000000000084000000020000000800050035000000001000006f02b32bf25e7642f2578291dbb87292342f27afed3832a35dc2135c459fd0e5abc8a6b359e280fc19d5ccbd893990a960987ce9d70b338542df34fd3a224a1ca74331dc1e586d6065a545aa27d7d920d87d3997ce0f87b75ffdc28d14b133", @ANYRES32=r3], 0x20, 0x5}, {&(0x7f0000002780)=@in6={0xa, 0x4e24, 0xffff, @loopback, 0x4}, 0x1c, &(0x7f0000003b00)=[{&(0x7f00000027c0)="360584e99f9646361d2637d5a3a9e07a15ae95f37100f65ee9bfd9f9e3ac7394abb8cbd63e7da2caf58bdf5aefbfe0ca7d72cafd5deaf89ba98d219f98e2358b809685b902f11c364864cf2fa8c0391e4b29ad462645a7b4023b4331d9c1b1e621bb5c2d660f0967672f620580419f5d7250bedefa2a7f6901899deeb7bad5086f8cb5dcff95fe8591e41e81608a0548cf", 0x91}, {&(0x7f0000002880)="e83db37c67486b414c9bf22c3f54d19aed37fe58bfcde2ce70e4a691c0bfafc27dbe0225a87ea0f506ea15520fc8c752a2446f06c75c758c6ba17204c3f49dda89f4719e9b08bfee6c4450d81b2dc467749f74ed29bfaa64227a05e484da5f4dc891cf19d46ffefd53288be74e3a6907d0ca807988a120d0a3cd3791330d706743ecdbd107bff75552ac05969445484474a8a2507c46008f9b2f3859259498c2fffd54bb234555358a2d4d4a84d4b8a647a69847136c0c02603c42195a08a34699ee4bd6f1eff871775fd9533cdd131a5179f3a42309e369ae31a90c875c377e67c904a67072b995bfdb832b9e01f2847c7db87927964d71ed41f6b1008850b3c8011f024ef930a127c53e6a2cee3d01ad47bfd78d69440bb1dac4d740a63e97f8635b0fc61b3cd7bc7854b732f0c74af6c74302e532e8767f26953a0fd65edb8d4ca624dfd8fb2a6e5fc7356757f4cdfe45b5b52875d411f8077cb063a1311d66bb95ebfaa97d9220bcb3efa5239c155279e6c8d65ff61d5218fa184d112b18524b99b847f29fac5ad2444fd685e4317f5aaa3fd997d41f5c58d81174809c6914cb1c5a33a56df4394460b24564f45a026f0c0f93d90c0eb1421e4666dcbdc13ada0ca25ae7279eaa3cce791edff243dcdf2468fc29c59b1a57daef02d1d1851b48d8dc64fd02c71621c654c5523275fc0993f9324fcda954a0a5009e68ff506e741962074836e65323cc7748854153a5e43767661e28d96260e48a94da34634655fbc212d09a1dcd63c0e6939dd3a5a702cbc33f2921bc185bd6c607f0cec1747631448c83209f30552e05c6c5b25e708bd23808fe5a5cb474a79636bca5dd0ab1c21cfd94b720adea33bc04353c1e55641454b8dc77ed77c64d73af55e61ad4549e8f467654fd08686b0ae11463ce5dc2526014bd7f0b4dcdd70844735f6e26f1f9454899864164ad30f43e39e8110888b9461add098f6f3e29e58da4b2bdebd288e17e92d760373c296c80cfe48e8bba5494447ab8ca6be2ce02868f46352fb7b02c27f47e184820ee6e344a16452ebe985423658c9ef64f7bebe95d15317250c5b73e888457d7a2ea2ad5560e47f707bc2cce134a9722963d2780ecccda41f1ba29575f8f9f393cb42167a8f486dc3afa1fccf63a484e77704842ca1b3a6eaba93b35f8bee0989b8674c7fa754a3e2df058dbd9f40ee027072f8d17797b5f908d203139a08122f3dfd48473be5324ca884f8641a069fb72c1746242cd3481b074db70f5b33366cb7d8063769fdce1175783c12fedd4239da27ae040f0f01a04e6313910e7ee6b14023f5f39415eb4dba622bb1cab7e48e05d949570574ecc9e74b3f097702a4c222ece0829b90436d29a5f4075b029783155767dace836d924739c87e426129db032a4876bc0c690daf78ac4fc14db70203263efd0b42a104b18ccf99059c5e25701c050deb817a17f6059914b963699f5e951079317492103a91614f5b2f5d3f0105c07722fa8ba655ab7521cfaaaf7132bb6f2392e10ceb4165f1dcfbd506a14cb359b753f174402a4db8a02a113803d9b24dcc64be4bf578ff7a111bf4832ad9e4fb5ce6a1e5f96f7f43f5a1202e2067e74aeb9d704a9208c9b20205e6dccbc58551136e874374d73b30491b2cb8e3c91857132381452135be307e2ce1e2952a3683f939e617ced3cef2f936c9c6313aa39fb05164c0f76f8a3b7723d58697b9c61cad18eacb3e1f22c906785e7f19a96de24ef448e59d561e1d69573b891e43b378be17a46f82b85875907ef74df75b87718e7dae6b7891f40234a3e7889a114719cd7e1bcb3c99232aa0320c9040b3c8f65029ba4e92960dfeb68abcd73c3626921eb21a3047598ed90ccc01dd8a2f397eb4da75f606b9282acd13542cbe6815f00097e5cce67093ac4a96db4a0e600b593b0a7b26809bae3640f5a78b66b68717beb0e42eb7c845e0aeca8e2df6fd51f3c81a9ab101ac04f54cefa4b3e9628e51ca33fb33ea33f58915a69ade43c049b1f2c71561fe188a9abc3724a6715b05880e67d7642426b37bdfbf0ae4530813080b80efdf10a0d6e28cf158e8f42e72fadb9583b1698c67ee457db38cb2bf0ffa49706105d28bc6321449becb26f1af955c4cb25a5b0592210c3699656345e1b777cd1944adf5dbf9740f55a88e2b417b05a458fc25dacda5dcec98658e636aae1f326ae5b277d82ca1a2e6ceb33da45b91f06d1768489a0549b9124fec93ae0150922fac7771120d1b7df5ecd0a467a02ac14373957f5567ec0ada563fd497030b4338ea8e63302ca1e6f4f0ba1a650934cc74831c8624b2efa46f36e9fbd6f0493342f4695929954bce27cd3efcbdc916b2964116ad2136c4f79f15e6a4c1a1e4bb30d6855025c274fabd4c2b0729f105f44b559c3bd13ac4dd7f388033a8d1fcbca3dced13a0c487d44235ce48036ffead76e94e9fe4cc83ad2f7950db695e884be025ba233e69f43c4a7f4238001358c0b3d5dd1dbc0f4d310292843f48b2c8dd81e3801946005dee293e8f99d9eae16dd4e8187ce8c5304dd586e331bb01dc7a75505ba01634d9a273202f548007b6fa0d9904e540dea50011f068111fe35fdad5fa7d7655f35c75323083a00c5c190501b264dff6b27c12bbfd386815f62dd93cbc1599818a0bd383647786ee6481271e6583a19dd06ebe7745b48310b522ef0b17291a74eb3d9c8b9b6d009de5b253639a5de82236514daba1ec686b72a39cb8acfa3ec7ee4a19144d8e0c94d249da88275718fc70694034bbac265054fb711acbf13a7212306c58d5ff074b5782d0db6b9533044f9f15f23923103bcb7a896e7895438531bc286118dbdf3d3392838fda69bfbc54108f1a9e4f9bf9f2ea6e32b1fe67a8784671d773fd99c7572a9041b61a438515cf68d27c46a291d57bc13ce588ff5f65c68936c9b5563c86a7502bdedcc39e6ba28d3f25df2f4ed97827ffd024cb17552853cb38e217b66c30123521000fa75229f5eaa586755784193249afa830c97ac1c1cb4a1889e32b9a76c55296d33f5e76a43911d7d224fda6ec0cc0ed5bce3f73457d2a8358eea2b59006635fb31fcea45fec783f0b11fe87e20feb1b7fe54db4473a8c4654189633e7104e1c4f96b3e9147f5412151fa01572b5068a8745ae576e40fed6012f95217ff4274225fd51c69fa342c1c607949ad5d534b4bec8401db6e32125d0d9528e10ca7525b67a5a294b4e47bdad8121fec36a053a9f82214ecdcb35a5698cffe725c3defdcfa27d55b5aa57b7a66bb403ce7d3ed9cb181cea019e90c44a128082e2ba8b757dcbd312f5f287a52eb4b4d29775e6020b2d92a7fd0c816ddf4297aa3bfddcedd0da64962af64f783aca7f49b205b53a460ff54043247a3f505048e1fe2a621c9105f9b89758ae8bd39bbf960fc72102ad180900e9c4586657d9ebf7a48501a62e3a734f8535e54ba34c3e7d8b8a73e9b5a67c43e68070183b673af3899464bb02226160703462e46c5a366f609325d7add9a2877c88e6eb008990c733e838a81857b45ccea3f581e6c652842c971d41c7012afe423b10535fabb9e7fe60232ce6f5198dc958df9991537cef36bdc4a3ed94c4734d98cc54527fcafc76eab12e370ffb718379775bf5ce8870f1f1b5196fd1d2e9be9b996ef30dfe84ef3a0261de1aa732ec4ab1a100158d19e16b4fdf0aaf880b741ede66e26247485271efa5ce5f3e11b29b4c2d57d23d05ecedec34965910d67daee3e93f81e51f8b682008cf6bcf5e12cf6b1cc135cc1a2ed3a3616c06dc72ff610e04b86a431fc1ee93e49118ba96401fa387a5315203e784a9dccd8352c70ace17fcf21f7c50a2ac8a738107d0622e8c06e57fcf807d4d394ca5747cf4233bba5cfcd787f4ad34b32a0916fc4046b08e50c91ffe208cd404c5947657daf9d9f9375e70897be28a8ff6c06185b58adaba6a2b654e339bf7d97ba31224a960b855af33a2278753ff84da044aa18de8f291aae163f2954db17d753873d55759b2825f888b9ae008752943db06b198728cf15d5f668798c45a23eeb12a1e285e160d60928a52a3ade45680f65964c8c349cbcc7be814511aa257ac7f27efae0bece830a5ba57c962c9bbdbbbe703aed680d5568a44e395b38cba31eb10dc45d0fcb393b52f51b8bec4aa59113d4f19d27577162cb97d3cda95b7f0af1223b0b7a2c17d82ca3cdb8e01c4628aa732197dbd5a3642c771593e5667e6d0838658238698bb6735b8a18e97bf45ddbb7e358b7bea462098872e047465b5d7112ffd3a1b18f4b8a2fbe5d511d5bae3cee997603fcf44da9abef7077d0e69ac76ddc99c1b4ac2a592a041bd306c848dd5739519a52b4a1b8dd896e7f7256c77edfd290a61d98cbb6b04b9d925fa259d902832260db804364eee1f0c9f926b0aec31afdabdad44bd0b107f87348d50c5a643abf1b6e5a701e5f741da5ba90a6e9b1dd8066c06102efbb310c8055385d37f236131755434367432d8cb547ec53b8dc9ed5d621a444988437874ed9f1c1ff5c80f221bae64a3dabc7baa1a047953c0b54a9de143ee088f00b58f5c755dbf0e50456342fefed554f732c87bfe08f8e3c808972c913365d4bc90e4a67660a63c52d47af2f1b58c9d01d2c0524b10b1d487e124ec89ef0e8adb96ffe3184a56efdbc63d49be9099e9f50fdd59cbb2786711a0a23e57cc46ea170fa9b40781faa4473fe81812304265231d8ef67d0208fac9a6c0d4022811a37285dbab212e73742e33e998c2a29ca98b918dddeb8eabf57b220c2f350684cfcac0999c9662dc9091bc8a9527d8aa0b4ebc6760b02062fa5fb46447662949397d5b316f35ad55002906caa816e7841180f0d2357a9bf9b8d67d23b3d4eccfc1544b4de4a859dbed263c7a5ecf79aad12107c298dc40462e2e16253f8c40ef067e5a50009b0ac2b889889459adbfd61ce01b67e6f8e485aebc5c324b73a4a92d2e5a0c7447a9effc92ae997c732b88596a702d9ee85181828233c12e86b6d4ee55b0a77aab5c5e00fe5a56abf2b6988bc7b62ca7e3b76c8a9093690ec7316ad6c58311a1bc4669aa809f6dfc649a93c8434556019ad805710c6ac680d389760b06a1b53e3c5abd77304522bb1a22b098c176fa3161084fa371684f028d7b45989f50a36388cf4d859ceb51db640fa133c6d23da80632d9aa6a3dc7d557cd6b5a4d0becc3f53e05e69f69698f9171a721c0655256cbbd8b42392368a434c24298cb5a16cc6b183c21eb0c7adbc80b2badd050eae05fb3360d9cf0fa17938c84cb40b83c5fe991f699ca1fdd1ae68e36e64858b5f91b09a5e0909fe49a79ccab893da810cb7cdc53a90fedd1968faa18ec05e9be7b497337a9e9f010a3b0ccb3cbc1df6dbcbaf8474991b44f7f832a819159ffdabbe40f2d034b8c3b9a89fb459941570291f592b5cccff3d657fd9c9662198dff0faab53a21b317bbff3fda7f405927ebcc7241046855776db836502677ddd6f3f05efe3f45686521ac9a28bd8c3fc16a128bb7e82b69beb20da327554aa87caa7f15f1266f363f19b997baf9b83360863529f0d720ea5245ea05aa328e67cbf269d60e38cf8d603d6bb7a31529b79c1083854f21b98622cc3b46c16bde2a5927f24b070db753f73bbfe24ccaf67e79fd71432c43d7ba279611f04d87c377b818ec805c9c564e3e6733342fb7a44189b7fba66019cee75b47fb81fdee3c7a0fed9b5776852a1623a1b6734f7b6d2753de56d515605de6544ed02d6b9dd4d394783a0d0", 0x1000}, {&(0x7f0000003880)="fb6e3dbc07230fffbaa0065b6b6c7a69befe5e95a501825b4a93e0b768b317229024f59fc96c9b4cc160246b98ab1ccd04c943f2ac833d9c076b6d42df3c3969c2695e47f1b4e7c387541af4cacff2d9fcf11246332a", 0x56}, {&(0x7f0000003900)="c694dc9e84288bec2cd794f0e0e2addba1e66b58fabb70e943b8e542b733cfd9972111d3f7", 0x25}, {&(0x7f0000003940)="0d329637ba549201d0a3eb493856904b01b578e684be6a0b1cd718bd4e29321d52559a68c6a0b2eddccb0c1989c9a92a5c2afcf837091c8ac11f3a42cd6ae05820cedef5b97d4cf648c1e2a86432bbfa7be08a4eb518809a3d083a931a252f2500f7cbdd486b99690dc48a393987036910f69b1aefd4bbe12342e0a1b130d5ed07bd25ca226ee8d1ff461dc039ae0853cc1da69f7687958a1a31b7f6ca75846707a5fb605e945cdc564bad7da2441500a98cf040572cf9e7a914", 0xba}, {&(0x7f0000003a00)="49bbce0f044fbde93f5b92e3371cc754d554", 0x12}, {&(0x7f0000003a40)="91ef0ac987c033135be69b04ab9db699b1fa8dbe5dc44fe6ee08fb5028c952acb05d56027b8dcb9b91bffa16ececa937b68c37bcc54e965e4622197c75af969198989f37310240d592cf3d8edde366ca5704be47ba81ac4593963f04c51d3d2c8710", 0x62}, {&(0x7f0000003ac0)="7d94cd2a1f7f7d2d9ac6f6a5ab93bb3f25ee14bf48b4db1005b6c128811ea0fa0c1ce521c5345c08", 0x28}], 0x8, &(0x7f0000003b80)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0x30, 0x10}, {&(0x7f0000003bc0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000003c00)}, {&(0x7f0000003c40)="ba9f3009d497b892b8eb38e7c0c5d94326355bb50cc216d044", 0x19}, {&(0x7f0000003c80)="11c1e7f62aa137cd166612a3f0afffbc11db089b3679a21683082e", 0x1b}], 0x3, &(0x7f0000003e40)=[@sndinfo={0x20, 0x84, 0x2, {0x200, 0x1, 0x4, 0x10001, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x6}], 0x38, 0x40000000}, {&(0x7f0000003e80)=@in6={0xa, 0x4e20, 0x0, @local, 0x81}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000003ec0)="27b0f4dcda5dd02cc27c8c0b68f25c62a55ef2d8ab04b9065557e0e7b8134479686215954c46ab1f213078c7d0efcd18e6dc18", 0x33}], 0x1, &(0x7f0000004040)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x753, 0x7, 0x2, 0x8, 0xffffffff, 0x5, 0x8000, 0x5, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x1b4, 0x1, 0x40, 0x7, r10}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x10000}}, @init={0x18, 0x84, 0x0, {0x1f, 0x0, 0xde58, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0x0, 0x1, 0x1, 0xd4, 0x1, 0x3ff, 0x7f, r13}}], 0xd0, 0x2060}], 0x5, 0x2000c150) [ 658.235479][T15536] __x64_sys_ioctl+0xe3/0x120 [ 658.235494][T15536] do_syscall_64+0xf7/0x1c0 [ 658.235508][T15536] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.235519][T15536] RIP: 0033:0x4598c7 [ 658.235529][T15536] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 658.235534][T15536] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.235543][T15536] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 658.235553][T15536] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 658.235558][T15536] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 658.235562][T15536] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 658.235567][T15536] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 658.425284][T15542] overlayfs: failed to resolve './file1': -2 [ 658.458068][T15532] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 658.467846][T15532] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81000000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:55 executing program 4 (fault-call:0 fault-nth:32): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 658.590395][T15551] FAULT_INJECTION: forcing a failure. [ 658.590395][T15551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 658.603628][T15551] CPU: 0 PID: 15551 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 658.611513][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.621566][T15551] Call Trace: [ 658.624861][T15551] dump_stack+0x1d8/0x2f8 [ 658.629193][T15551] should_fail+0x555/0x770 [ 658.633617][T15551] should_fail_alloc_page+0x55/0x60 [ 658.638818][T15551] prepare_alloc_pages+0x283/0x460 [ 658.643932][T15551] __alloc_pages_nodemask+0xb2/0x5d0 [ 658.649224][T15551] kmem_getpages+0x4d/0xa00 [ 658.653727][T15551] cache_grow_begin+0x7e/0x2c0 [ 658.658489][T15551] cache_alloc_refill+0x311/0x3f0 [ 658.663519][T15551] ? check_preemption_disabled+0xb7/0x2a0 [ 658.669235][T15551] kmem_cache_alloc_trace+0x2d0/0x2f0 [ 658.674599][T15551] ? kobject_uevent_env+0x2cd/0x1260 [ 658.674611][T15551] ? dev_uevent_filter+0xb0/0xb0 [ 658.674622][T15551] kobject_uevent_env+0x2cd/0x1260 [ 658.674642][T15551] kobject_uevent+0x1f/0x30 [ 658.694414][T15551] loop_set_fd+0xfc3/0x1470 [ 658.698924][T15551] lo_ioctl+0xd5/0x2200 [ 658.703076][T15551] ? __kasan_slab_free+0x12a/0x1e0 [ 658.708193][T15551] ? kasan_slab_free+0xe/0x10 [ 658.712872][T15551] ? kfree+0x115/0x200 [ 658.716937][T15551] ? tomoyo_path_number_perm+0x4e1/0x640 [ 658.722580][T15551] ? tomoyo_file_ioctl+0x23/0x30 [ 658.727514][T15551] ? security_file_ioctl+0x6d/0xd0 [ 658.732617][T15551] ? __x64_sys_ioctl+0xa3/0x120 03:07:55 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 658.737461][T15551] ? do_syscall_64+0xf7/0x1c0 [ 658.742138][T15551] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.748207][T15551] ? debug_check_no_obj_freed+0x505/0x5b0 [ 658.753942][T15551] ? rcu_lock_release+0x9/0x30 [ 658.758710][T15551] ? rcu_lock_release+0x9/0x30 [ 658.763468][T15551] ? lo_release+0x1f0/0x1f0 [ 658.767966][T15551] blkdev_ioctl+0x807/0x2980 [ 658.772557][T15551] ? tomoyo_path_number_perm+0x53e/0x640 [ 658.778201][T15551] block_ioctl+0xbd/0x100 [ 658.782525][T15551] ? blkdev_iopoll+0x100/0x100 [ 658.787283][T15551] do_vfs_ioctl+0x744/0x1730 [ 658.791868][T15551] ? __fget+0x4b1/0x510 [ 658.796026][T15551] ? tomoyo_file_ioctl+0x23/0x30 [ 658.800958][T15551] ? security_file_ioctl+0xa1/0xd0 [ 658.806068][T15551] __x64_sys_ioctl+0xe3/0x120 [ 658.810740][T15551] do_syscall_64+0xf7/0x1c0 [ 658.815243][T15551] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 658.821131][T15551] RIP: 0033:0x4598c7 [ 658.825017][T15551] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 658.844613][T15551] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 658.853015][T15551] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 658.860978][T15551] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 658.868941][T15551] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 658.876902][T15551] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 03:07:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xa082}}}}]}, 0x48}}, 0x0) 03:07:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x4788}}}}]}, 0x48}}, 0x0) [ 658.884866][T15551] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 658.894056][T15549] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 658.908075][T15549] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88470000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:55 executing program 4 (fault-call:0 fault-nth:33): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 659.092103][T15566] FAULT_INJECTION: forcing a failure. [ 659.092103][T15566] name failslab, interval 1, probability 0, space 0, times 0 [ 659.105964][T15566] CPU: 1 PID: 15566 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 659.113878][T15566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.123930][T15566] Call Trace: [ 659.127219][T15566] dump_stack+0x1d8/0x2f8 [ 659.131541][T15566] should_fail+0x555/0x770 [ 659.131582][T15566] __should_failslab+0x11a/0x160 [ 659.131595][T15566] ? __d_alloc+0x2d/0x6e0 [ 659.131606][T15566] should_failslab+0x9/0x20 [ 659.131618][T15566] kmem_cache_alloc+0x56/0x2e0 [ 659.131630][T15566] __d_alloc+0x2d/0x6e0 [ 659.131644][T15566] d_alloc+0x4e/0x1d0 [ 659.145546][T15566] __lookup_hash+0xe5/0x290 [ 659.145565][T15566] filename_create+0x14f/0x670 [ 659.145577][T15566] ? getname_flags+0x214/0x640 [ 659.145592][T15566] do_mkdirat+0x5a/0x320 [ 659.145608][T15566] __x64_sys_mkdir+0x60/0x70 [ 659.145621][T15566] do_syscall_64+0xf7/0x1c0 [ 659.154838][T15566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.154848][T15566] RIP: 0033:0x458e77 [ 659.154858][T15566] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.154864][T15566] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 659.154874][T15566] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 659.154880][T15566] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 659.154886][T15566] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 659.154892][T15566] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 659.154898][T15566] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 659.179476][T15569] overlayfs: failed to resolve './file1': -2 [ 659.285918][T15563] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 659.300165][T15563] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:56 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:56 executing program 4 (fault-call:0 fault-nth:34): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x34000}}}}]}, 0x48}}, 0x0) 03:07:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x4888}}}}]}, 0x48}}, 0x0) 03:07:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88480000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:56 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000040)='./file1\x00', 0x0, 0x12c) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r5, r4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r8, 0x0, 0x0) ioctl$KDGKBLED(r8, 0x4b64, &(0x7f00000001c0)) r9 = getpgrp(0x0) sendmsg$netlink(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r7}}}], 0x20}, 0x0) fchownat(r1, &(0x7f0000000080)='./bus\x00', r3, r7, 0x1000) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7570e67cafd37b7065726469913d2e2f66696c65312c6c6f776540c253de3d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f7079"]) [ 659.426933][T15574] FAULT_INJECTION: forcing a failure. [ 659.426933][T15574] name failslab, interval 1, probability 0, space 0, times 0 [ 659.456433][T15574] CPU: 0 PID: 15574 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 659.464453][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.474516][T15574] Call Trace: [ 659.477808][T15574] dump_stack+0x1d8/0x2f8 [ 659.482141][T15574] should_fail+0x555/0x770 [ 659.486559][T15574] __should_failslab+0x11a/0x160 [ 659.491491][T15574] ? skb_clone+0x1cc/0x380 [ 659.495916][T15574] should_failslab+0x9/0x20 [ 659.500520][T15574] kmem_cache_alloc+0x56/0x2e0 [ 659.505291][T15574] skb_clone+0x1cc/0x380 [ 659.509545][T15574] netlink_broadcast_filtered+0x619/0x1080 [ 659.511212][ C1] net_ratelimit: 24 callbacks suppressed [ 659.511217][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 659.515355][T15574] netlink_broadcast+0x3a/0x50 [ 659.521047][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 659.526709][T15574] kobject_uevent_env+0xcf0/0x1260 [ 659.526729][T15574] kobject_uevent+0x1f/0x30 [ 659.526740][T15574] loop_set_fd+0xfc3/0x1470 [ 659.526762][T15574] lo_ioctl+0xd5/0x2200 [ 659.555407][T15574] ? __kasan_slab_free+0x12a/0x1e0 [ 659.560597][T15574] ? kasan_slab_free+0xe/0x10 [ 659.565270][T15574] ? kfree+0x115/0x200 [ 659.569328][T15574] ? tomoyo_path_number_perm+0x4e1/0x640 [ 659.574950][T15574] ? tomoyo_file_ioctl+0x23/0x30 [ 659.579879][T15574] ? security_file_ioctl+0x6d/0xd0 [ 659.584980][T15574] ? __x64_sys_ioctl+0xa3/0x120 [ 659.589819][T15574] ? do_syscall_64+0xf7/0x1c0 [ 659.594500][T15574] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.600567][T15574] ? debug_check_no_obj_freed+0x505/0x5b0 [ 659.606304][T15574] ? rcu_lock_release+0x9/0x30 [ 659.611067][T15574] ? rcu_lock_release+0x9/0x30 [ 659.615833][T15574] ? lo_release+0x1f0/0x1f0 [ 659.620343][T15574] blkdev_ioctl+0x807/0x2980 [ 659.624931][T15574] ? tomoyo_path_number_perm+0x53e/0x640 [ 659.630578][T15574] block_ioctl+0xbd/0x100 [ 659.634903][T15574] ? blkdev_iopoll+0x100/0x100 [ 659.639660][T15574] do_vfs_ioctl+0x744/0x1730 [ 659.644254][T15574] ? __fget+0x4b1/0x510 [ 659.648406][T15574] ? tomoyo_file_ioctl+0x23/0x30 [ 659.653339][T15574] ? security_file_ioctl+0xa1/0xd0 [ 659.658447][T15574] __x64_sys_ioctl+0xe3/0x120 [ 659.663123][T15574] do_syscall_64+0xf7/0x1c0 [ 659.667622][T15574] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 659.673518][T15574] RIP: 0033:0x4598c7 [ 659.677405][T15574] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 659.697002][T15574] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.705408][T15574] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 659.713371][T15574] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 03:07:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffff}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 659.721335][T15574] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 659.729472][T15574] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 659.737448][T15574] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:56 executing program 4 (fault-call:0 fault-nth:35): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 659.909004][T15596] FAULT_INJECTION: forcing a failure. [ 659.909004][T15596] name failslab, interval 1, probability 0, space 0, times 0 [ 659.927899][T15596] CPU: 0 PID: 15596 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 659.936097][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.949113][T15596] Call Trace: [ 659.953151][T15596] dump_stack+0x1d8/0x2f8 [ 659.957783][T15596] should_fail+0x555/0x770 [ 659.962734][T15596] __should_failslab+0x11a/0x160 [ 659.969155][T15596] should_failslab+0x9/0x20 [ 659.973935][T15596] kmem_cache_alloc_node+0x65/0x280 [ 659.983126][T15596] ? __alloc_skb+0x9f/0x500 [ 659.987719][T15596] __alloc_skb+0x9f/0x500 [ 659.992832][T15596] alloc_uevent_skb+0x7f/0x230 [ 659.998900][T15596] kobject_uevent_env+0xcbb/0x1260 [ 660.004386][T15596] kobject_uevent+0x1f/0x30 [ 660.011855][T15596] loop_set_fd+0xfc3/0x1470 [ 660.017153][T15596] lo_ioctl+0xd5/0x2200 [ 660.023479][T15596] ? __kasan_slab_free+0x12a/0x1e0 [ 660.028608][T15596] ? kasan_slab_free+0xe/0x10 [ 660.035886][T15596] ? kfree+0x115/0x200 [ 660.041446][T15596] ? tomoyo_path_number_perm+0x4e1/0x640 [ 660.047706][T15596] ? tomoyo_file_ioctl+0x23/0x30 [ 660.054561][T15596] ? security_file_ioctl+0x6d/0xd0 [ 660.063576][T15596] ? __x64_sys_ioctl+0xa3/0x120 [ 660.069462][T15596] ? do_syscall_64+0xf7/0x1c0 [ 660.079790][T15596] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.087341][T15596] ? debug_check_no_obj_freed+0x505/0x5b0 [ 660.094926][T15596] ? rcu_lock_release+0x9/0x30 [ 660.100481][T15596] ? rcu_lock_release+0x9/0x30 [ 660.107772][T15596] ? lo_release+0x1f0/0x1f0 [ 660.116197][T15596] blkdev_ioctl+0x807/0x2980 [ 660.120790][T15596] ? tomoyo_path_number_perm+0x53e/0x640 [ 660.126528][T15596] block_ioctl+0xbd/0x100 [ 660.130853][T15596] ? blkdev_iopoll+0x100/0x100 [ 660.135638][T15596] do_vfs_ioctl+0x744/0x1730 [ 660.141437][T15596] ? __fget+0x4b1/0x510 [ 660.145610][T15596] ? tomoyo_file_ioctl+0x23/0x30 [ 660.152801][T15596] ? security_file_ioctl+0xa1/0xd0 [ 660.158456][T15596] __x64_sys_ioctl+0xe3/0x120 [ 660.164701][T15596] do_syscall_64+0xf7/0x1c0 [ 660.169323][T15596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.176685][T15596] RIP: 0033:0x4598c7 [ 660.180576][T15596] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.206161][T15596] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.214828][T15596] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 00000000004598c7 [ 660.224268][T15596] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 660.232449][T15596] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 660.240722][T15596] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 660.248965][T15596] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x400300}}}}]}, 0x48}}, 0x0) 03:07:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 660.259760][T15594] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 660.279527][T15600] overlayfs: unrecognized mount option "upæ|¯Ó{perdi‘=./file1" or missing value [ 660.285876][T15594] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:07:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x5865}}}}]}, 0x48}}, 0x0) 03:07:57 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='lowerdir=./file0,metacopy=on,workdir=./file0,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00,uid=', @ANYRESDEC=r2, @ANYBLOB=',obj_type=@nodevuser*\\,appraise,euid=', @ANYRESDEC=r4, @ANYBLOB="8e952bd3338000"]) [ 660.391193][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 660.401179][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:57 executing program 4 (fault-call:0 fault-nth:36): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 660.537831][T15612] FAULT_INJECTION: forcing a failure. [ 660.537831][T15612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 660.559511][T15612] CPU: 1 PID: 15612 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 660.559519][T15612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.559522][T15612] Call Trace: [ 660.559539][T15612] dump_stack+0x1d8/0x2f8 [ 660.559555][T15612] should_fail+0x555/0x770 [ 660.559572][T15612] should_fail_alloc_page+0x55/0x60 [ 660.559581][T15612] prepare_alloc_pages+0x283/0x460 [ 660.559600][T15612] __alloc_pages_nodemask+0xb2/0x5d0 [ 660.589615][T15612] ? lo_release+0x1f0/0x1f0 [ 660.589629][T15612] ? blkdev_ioctl+0x807/0x2980 [ 660.589647][T15612] kmem_getpages+0x4d/0xa00 [ 660.589659][T15612] cache_grow_begin+0x7e/0x2c0 [ 660.589671][T15612] cache_alloc_refill+0x311/0x3f0 03:07:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xbb0f0000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 660.599286][T15612] ? check_preemption_disabled+0xb7/0x2a0 [ 660.599305][T15612] kmem_cache_alloc+0x2b9/0x2e0 [ 660.599314][T15612] ? getname_flags+0xba/0x640 [ 660.599325][T15612] getname_flags+0xba/0x640 [ 660.599341][T15612] do_mkdirat+0x3c/0x320 [ 660.609732][T15612] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 660.609745][T15612] ? do_syscall_64+0x1d/0x1c0 [ 660.609760][T15612] __x64_sys_mkdir+0x60/0x70 [ 660.609771][T15612] do_syscall_64+0xf7/0x1c0 [ 660.609786][T15612] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 660.619007][T15612] RIP: 0033:0x458e77 [ 660.619018][T15612] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 660.619023][T15612] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 660.619033][T15612] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 660.619040][T15612] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 660.619045][T15612] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 660.619051][T15612] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 660.619057][T15612] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 660.619260][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 660.639154][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 660.653351][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 660.663339][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:07:57 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e8bcde87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe7030000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:57 executing program 4 (fault-call:0 fault-nth:37): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x6000}}}}]}, 0x48}}, 0x0) 03:07:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x1000000}}}}]}, 0x48}}, 0x0) [ 660.951194][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 660.957034][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 660.982124][T15633] FAULT_INJECTION: forcing a failure. [ 660.982124][T15633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 660.995432][T15633] CPU: 1 PID: 15633 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 660.995439][T15633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.995444][T15633] Call Trace: [ 660.995460][T15633] dump_stack+0x1d8/0x2f8 [ 660.995473][T15633] should_fail+0x555/0x770 [ 660.995489][T15633] should_fail_alloc_page+0x55/0x60 [ 661.013503][T15633] prepare_alloc_pages+0x283/0x460 [ 661.013519][T15633] __alloc_pages_nodemask+0xb2/0x5d0 [ 661.013531][T15633] ? lo_release+0x1f0/0x1f0 [ 661.013547][T15633] ? blkdev_ioctl+0x807/0x2980 [ 661.021157][T15633] kmem_getpages+0x4d/0xa00 [ 661.021171][T15633] cache_grow_begin+0x7e/0x2c0 [ 661.021184][T15633] cache_alloc_refill+0x311/0x3f0 [ 661.021194][T15633] ? check_preemption_disabled+0xb7/0x2a0 [ 661.021208][T15633] kmem_cache_alloc+0x2b9/0x2e0 [ 661.021216][T15633] ? getname_flags+0xba/0x640 [ 661.021226][T15633] getname_flags+0xba/0x640 [ 661.021240][T15633] do_mkdirat+0x3c/0x320 [ 661.030814][T15633] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 661.030828][T15633] ? do_syscall_64+0x1d/0x1c0 [ 661.030842][T15633] __x64_sys_mkdir+0x60/0x70 [ 661.030853][T15633] do_syscall_64+0xf7/0x1c0 [ 661.041219][T15633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.041230][T15633] RIP: 0033:0x458e77 [ 661.041241][T15633] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.041246][T15633] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 661.041255][T15633] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 661.041261][T15633] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 661.041266][T15633] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 661.041272][T15633] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 661.041277][T15633] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xfffffff1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 661.223231][T15637] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:58 executing program 4 (fault-call:0 fault-nth:38): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x2000000}}}}]}, 0x48}}, 0x0) 03:07:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe7730100}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:58 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mount$9p_virtio(&(0x7f0000000040)=',eth0\x00', &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='9p\x00', 0x2000, &(0x7f0000000140)={'trans=virtio,', {[{@posixacl='posixacl'}], [{@permit_directio='permit_directio'}]}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 661.384498][T15646] FAULT_INJECTION: forcing a failure. [ 661.384498][T15646] name failslab, interval 1, probability 0, space 0, times 0 [ 661.414954][T15646] CPU: 1 PID: 15646 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 661.423056][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.423080][T15646] Call Trace: [ 661.423101][T15646] dump_stack+0x1d8/0x2f8 [ 661.423116][T15646] should_fail+0x555/0x770 [ 661.423131][T15646] __should_failslab+0x11a/0x160 [ 661.423142][T15646] ? tomoyo_encode2+0x273/0x5a0 [ 661.423152][T15646] should_failslab+0x9/0x20 [ 661.423162][T15646] __kmalloc+0x7a/0x340 [ 661.423174][T15646] tomoyo_encode2+0x273/0x5a0 [ 661.459445][T15646] tomoyo_realpath_from_path+0x769/0x7c0 [ 661.459466][T15646] tomoyo_path_number_perm+0x166/0x640 [ 661.459497][T15646] ? rcu_read_lock_sched_held+0x10b/0x170 [ 661.473986][T15646] ? trace_kmem_cache_free+0xb2/0x110 [ 661.490494][T15646] tomoyo_path_mkdir+0x9c/0xc0 [ 661.490513][T15646] security_path_mkdir+0xed/0x170 [ 661.490531][T15646] do_mkdirat+0x15c/0x320 [ 661.504615][T15646] __x64_sys_mkdir+0x60/0x70 [ 661.509195][T15646] do_syscall_64+0xf7/0x1c0 [ 661.509213][T15646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.509223][T15646] RIP: 0033:0x458e77 [ 661.509232][T15646] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.509240][T15646] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 661.543063][T15646] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 661.543070][T15646] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 661.543075][T15646] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 661.543082][T15646] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 03:07:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x6558}}}}]}, 0x48}}, 0x0) [ 661.543088][T15646] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 661.557204][T15646] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe877fdff}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:58 executing program 4 (fault-call:0 fault-nth:39): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefffffff}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 661.718557][T15656] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:07:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 661.816787][T15666] FAULT_INJECTION: forcing a failure. [ 661.816787][T15666] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 661.830018][T15666] CPU: 1 PID: 15666 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 661.837906][T15666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.848408][T15666] Call Trace: [ 661.851713][T15666] dump_stack+0x1d8/0x2f8 [ 661.856049][T15666] should_fail+0x555/0x770 03:07:58 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x8100}}}}]}, 0x48}}, 0x0) 03:07:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 661.860482][T15666] should_fail_alloc_page+0x55/0x60 [ 661.874182][T15666] prepare_alloc_pages+0x283/0x460 [ 661.874198][T15666] __alloc_pages_nodemask+0xb2/0x5d0 [ 661.874216][T15666] kmem_getpages+0x4d/0xa00 [ 661.889544][T15666] cache_grow_begin+0x7e/0x2c0 [ 661.894314][T15666] cache_alloc_refill+0x311/0x3f0 [ 661.899353][T15666] ? check_preemption_disabled+0xb7/0x2a0 [ 661.905092][T15666] __kmalloc+0x318/0x340 [ 661.905102][T15666] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 661.905114][T15666] tomoyo_realpath_from_path+0xdc/0x7c0 [ 661.905133][T15666] tomoyo_path_number_perm+0x166/0x640 [ 661.905162][T15666] ? rcu_read_lock_sched_held+0x10b/0x170 [ 661.920603][T15666] ? trace_kmem_cache_free+0xb2/0x110 [ 661.931743][T15666] tomoyo_path_mkdir+0x9c/0xc0 [ 661.931760][T15666] security_path_mkdir+0xed/0x170 [ 661.931774][T15666] do_mkdirat+0x15c/0x320 [ 661.931788][T15666] __x64_sys_mkdir+0x60/0x70 [ 661.931804][T15666] do_syscall_64+0xf7/0x1c0 [ 661.946959][T15666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 661.946969][T15666] RIP: 0033:0x458e77 03:07:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x3000000}}}}]}, 0x48}}, 0x0) 03:07:58 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) fstat(0xffffffffffffffff, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x40, &(0x7f0000000440)={[{@default_permissions='default_permissions'}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@metacopy_on='metacopy=on'}]}) [ 661.946981][T15666] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 661.960350][T15666] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 661.960361][T15666] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 661.960367][T15666] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 661.960373][T15666] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 661.960379][T15666] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 661.960385][T15666] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:59 executing program 4 (fault-call:0 fault-nth:40): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfeff0000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x8847}}}}]}, 0x48}}, 0x0) [ 662.231607][T15687] FAULT_INJECTION: forcing a failure. [ 662.231607][T15687] name failslab, interval 1, probability 0, space 0, times 0 [ 662.257977][T15687] CPU: 0 PID: 15687 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 662.265897][T15687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.275953][T15687] Call Trace: [ 662.279250][T15687] dump_stack+0x1d8/0x2f8 [ 662.283616][T15687] should_fail+0x555/0x770 [ 662.288077][T15687] __should_failslab+0x11a/0x160 [ 662.293015][T15687] ? tomoyo_encode2+0x273/0x5a0 [ 662.297876][T15687] should_failslab+0x9/0x20 [ 662.302392][T15687] __kmalloc+0x7a/0x340 [ 662.306592][T15687] tomoyo_encode2+0x273/0x5a0 [ 662.311275][T15687] tomoyo_realpath_from_path+0x769/0x7c0 [ 662.317011][T15687] tomoyo_path_number_perm+0x166/0x640 [ 662.322506][T15687] ? rcu_read_lock_sched_held+0x10b/0x170 03:07:59 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x86}, 0x810) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x7, 0x8dc9}]}, 0xc, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff0f0000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x4000000}}}}]}, 0x48}}, 0x0) [ 662.328235][T15687] ? trace_kmem_cache_free+0xb2/0x110 [ 662.333625][T15687] tomoyo_path_mkdir+0x9c/0xc0 [ 662.338394][T15687] security_path_mkdir+0xed/0x170 [ 662.338410][T15687] do_mkdirat+0x15c/0x320 [ 662.338427][T15687] __x64_sys_mkdir+0x60/0x70 [ 662.338441][T15687] do_syscall_64+0xf7/0x1c0 [ 662.352340][T15687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.352351][T15687] RIP: 0033:0x458e77 [ 662.352363][T15687] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.352368][T15687] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 662.352378][T15687] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 662.352383][T15687] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 662.352388][T15687] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 662.352393][T15687] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 662.352398][T15687] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 662.467781][T15705] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 662.486396][T15687] ERROR: Out of memory at tomoyo_realpath_from_path. 03:07:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffd77e8}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:59 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="4800b5055e0bcfe87b0075") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:07:59 executing program 4 (fault-call:0 fault-nth:41): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:07:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x5000000}}}}]}, 0x48}}, 0x0) 03:07:59 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:07:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffa888}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 662.679300][T15716] FAULT_INJECTION: forcing a failure. [ 662.679300][T15716] name failslab, interval 1, probability 0, space 0, times 0 [ 662.709905][T15716] CPU: 0 PID: 15716 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 662.717833][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:07:59 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x8848}}}}]}, 0x48}}, 0x0) [ 662.717929][T15716] Call Trace: [ 662.717948][T15716] dump_stack+0x1d8/0x2f8 [ 662.717962][T15716] should_fail+0x555/0x770 [ 662.717981][T15716] __should_failslab+0x11a/0x160 [ 662.717991][T15716] ? ext4_mb_new_blocks+0x2ac/0x2cc0 [ 662.718002][T15716] should_failslab+0x9/0x20 [ 662.718012][T15716] kmem_cache_alloc+0x56/0x2e0 [ 662.718024][T15716] ext4_mb_new_blocks+0x2ac/0x2cc0 [ 662.718032][T15716] ? trace_kmalloc+0xcd/0x130 [ 662.718050][T15716] ? kcalloc+0x2f/0x50 [ 662.718060][T15716] ? __kmalloc+0x26c/0x340 [ 662.718067][T15716] ? kcalloc+0x2f/0x50 [ 662.718097][T15716] ? ext4_ext_search_right+0x4cb/0x940 [ 662.718108][T15716] ? ext4_find_extent+0x8e0/0xaa0 [ 662.718120][T15716] ? ext4_inode_to_goal_block+0x27b/0x3b0 [ 662.718133][T15716] ext4_ext_map_blocks+0x4b8c/0x7170 [ 662.718177][T15716] ext4_map_blocks+0x8f4/0x1e30 [ 662.718196][T15716] ? __kasan_check_write+0x14/0x20 [ 662.718209][T15716] ext4_getblk+0xae/0x460 [ 662.718223][T15716] ext4_bread+0x4a/0x340 [ 662.718235][T15716] ext4_append+0x175/0x310 [ 662.718250][T15716] ext4_mkdir+0x7ad/0x1450 [ 662.731773][T15716] vfs_mkdir+0x43f/0x610 [ 662.731791][T15716] do_mkdirat+0x1d7/0x320 [ 662.731805][T15716] __x64_sys_mkdir+0x60/0x70 [ 662.731819][T15716] do_syscall_64+0xf7/0x1c0 [ 662.740538][T15716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 662.740547][T15716] RIP: 0033:0x458e77 [ 662.740559][T15716] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:07:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:07:59 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0xe4) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000009100)={&(0x7f0000008d40)=@hci, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008dc0)=""/22, 0x16}, {&(0x7f0000008e00)=""/83, 0x53}, {0x0, 0x256}, {&(0x7f0000008f40)=""/121, 0x79}], 0x4, &(0x7f0000009000)=""/242, 0xf2}, 0x1) sync_file_range(r0, 0x3c3, 0x5, 0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x196) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 662.750749][T15716] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 662.750758][T15716] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 662.750764][T15716] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 662.750769][T15716] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 662.750778][T15716] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 662.759984][T15716] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:07:59 executing program 4 (fault-call:0 fault-nth:42): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 662.982166][T15732] overlayfs: failed to resolve './file1': -2 [ 663.032563][T15736] FAULT_INJECTION: forcing a failure. [ 663.032563][T15736] name failslab, interval 1, probability 0, space 0, times 0 [ 663.046260][T15736] CPU: 0 PID: 15736 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 663.054253][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.064293][T15736] Call Trace: [ 663.064313][T15736] dump_stack+0x1d8/0x2f8 [ 663.064329][T15736] should_fail+0x555/0x770 [ 663.064346][T15736] __should_failslab+0x11a/0x160 03:08:00 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x6d) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40020a) write$cgroup_int(r0, &(0x7f0000000080), 0x12) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000080)={0x1, 0x3, 0x9b, 0x6b}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000000912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xc0080, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 663.064357][T15736] ? security_inode_alloc+0x36/0x1e0 [ 663.064368][T15736] should_failslab+0x9/0x20 [ 663.064378][T15736] kmem_cache_alloc+0x56/0x2e0 [ 663.064390][T15736] security_inode_alloc+0x36/0x1e0 [ 663.064402][T15736] inode_init_always+0x3b5/0x8d0 [ 663.064411][T15736] ? set_qf_name+0x3c0/0x3c0 [ 663.064424][T15736] new_inode_pseudo+0x7f/0x240 [ 663.064434][T15736] new_inode+0x28/0x1c0 [ 663.064448][T15736] ? trace_ext4_request_inode+0x28b/0x2d0 [ 663.081695][T15736] __ext4_new_inode+0x43d/0x5650 [ 663.081709][T15736] ? memset+0x31/0x40 [ 663.081729][T15736] ? smk_curacc+0xa3/0xe0 [ 663.081743][T15736] ext4_mkdir+0x3f5/0x1450 [ 663.081764][T15736] ? security_inode_permission+0xdd/0x120 [ 663.081781][T15736] vfs_mkdir+0x43f/0x610 [ 663.101802][T15736] do_mkdirat+0x1d7/0x320 [ 663.101819][T15736] __x64_sys_mkdir+0x60/0x70 [ 663.101832][T15736] do_syscall_64+0xf7/0x1c0 [ 663.101848][T15736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.101859][T15736] RIP: 0033:0x458e77 03:08:00 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000440)="03000000000000006abb6850272dd4f54dfdc5cb018b3b0ea03a462cec7232c1f6055c46dcb1641620ae81e7d7385202586030bc265a8fb9661bf53d1d2c6bad3ceda59d58affcffffff86f9c8c8b59829e24963e2667793cad5ed8aff8622262b6baaab4d79c5cac0208ba48b053b1fdad18b4e71e8dd734a5bb4bc7eb51ef0794582f8c61ee45177c243f46b7332a66d1ab27febfe0ec875c49bada1b94be8801904d0908cb012") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./fil}1,lowerdir-./bus,vorkdir=./file0,metacopy=on,\x00']) [ 663.120301][T15736] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 663.120308][T15736] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 663.120318][T15736] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 663.120324][T15736] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 663.120330][T15736] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 663.120336][T15736] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 663.120341][T15736] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 663.148561][T15739] overlayfs: failed to resolve './file1': -2 [ 663.287608][T15730] validate_nla: 22 callbacks suppressed [ 663.287615][T15730] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 663.296284][T15730] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x6000000}}}}]}, 0x48}}, 0x0) 03:08:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:00 executing program 4 (fault-call:0 fault-nth:43): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 663.396692][T15747] overlayfs: unrecognized mount option "lowerdir-./bus" or missing value [ 663.440724][T15750] FAULT_INJECTION: forcing a failure. [ 663.440724][T15750] name failslab, interval 1, probability 0, space 0, times 0 [ 663.461194][T15750] CPU: 0 PID: 15750 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 663.469114][T15750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.479193][T15750] Call Trace: [ 663.482485][T15750] dump_stack+0x1d8/0x2f8 [ 663.486812][T15750] should_fail+0x555/0x770 [ 663.491228][T15750] __should_failslab+0x11a/0x160 [ 663.496164][T15750] ? security_inode_alloc+0x36/0x1e0 [ 663.501443][T15750] should_failslab+0x9/0x20 [ 663.505940][T15750] kmem_cache_alloc+0x56/0x2e0 [ 663.510710][T15750] security_inode_alloc+0x36/0x1e0 [ 663.515823][T15750] inode_init_always+0x3b5/0x8d0 [ 663.520775][T15750] ? set_qf_name+0x3c0/0x3c0 [ 663.525358][T15750] new_inode_pseudo+0x7f/0x240 [ 663.525374][T15750] new_inode+0x28/0x1c0 [ 663.525387][T15750] ? trace_ext4_request_inode+0x28b/0x2d0 [ 663.525399][T15750] __ext4_new_inode+0x43d/0x5650 [ 663.525412][T15750] ? memset+0x31/0x40 [ 663.525431][T15750] ? smk_curacc+0xa3/0xe0 [ 663.540017][T15750] ext4_mkdir+0x3f5/0x1450 [ 663.540041][T15750] ? security_inode_permission+0xdd/0x120 [ 663.540061][T15750] vfs_mkdir+0x43f/0x610 [ 663.540076][T15750] do_mkdirat+0x1d7/0x320 [ 663.567570][T15750] __x64_sys_mkdir+0x60/0x70 [ 663.567585][T15750] do_syscall_64+0xf7/0x1c0 [ 663.567602][T15750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.567610][T15750] RIP: 0033:0x458e77 03:08:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x8d82}}}}]}, 0x48}}, 0x0) 03:08:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 663.567621][T15750] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 663.590809][T15750] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 663.590820][T15750] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 663.590826][T15750] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 03:08:00 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@index_on='index=on'}, {@workdir={'workdir', 0x3d, './file1/file0'}}, {@metacopy_on='metacopy=on'}]}) [ 663.590833][T15750] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 663.590839][T15750] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 663.590845][T15750] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 663.664088][T15748] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 03:08:00 executing program 4 (fault-call:0 fault-nth:44): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 663.701223][T15748] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 663.746727][T15762] overlayfs: missing 'lowerdir' [ 663.774822][T15765] FAULT_INJECTION: forcing a failure. [ 663.774822][T15765] name failslab, interval 1, probability 0, space 0, times 0 [ 663.831215][T15765] CPU: 1 PID: 15765 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 663.839129][T15765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.839135][T15765] Call Trace: [ 663.839152][T15765] dump_stack+0x1d8/0x2f8 [ 663.839166][T15765] should_fail+0x555/0x770 [ 663.839186][T15765] __should_failslab+0x11a/0x160 [ 663.839200][T15765] ? kcalloc+0x2f/0x50 [ 663.839216][T15765] should_failslab+0x9/0x20 [ 663.839227][T15765] __kmalloc+0x7a/0x340 [ 663.839242][T15765] kcalloc+0x2f/0x50 [ 663.839254][T15765] ext4_find_extent+0x216/0xaa0 [ 663.852577][T15765] ? trace_ext4_ext_map_blocks_enter+0x2ca/0x310 [ 663.852592][T15765] ext4_ext_map_blocks+0x170/0x7170 [ 663.852619][T15765] ? trace_lock_acquire+0x159/0x1d0 [ 663.852643][T15765] ? __kasan_check_write+0x14/0x20 [ 663.852658][T15765] ext4_map_blocks+0x8f4/0x1e30 [ 663.852678][T15765] ? __kasan_check_write+0x14/0x20 [ 663.852692][T15765] ext4_getblk+0xae/0x460 [ 663.852708][T15765] ext4_bread+0x4a/0x340 [ 663.852721][T15765] ext4_append+0x175/0x310 [ 663.861424][T15765] ext4_mkdir+0x7ad/0x1450 [ 663.861453][T15765] vfs_mkdir+0x43f/0x610 [ 663.861471][T15765] do_mkdirat+0x1d7/0x320 [ 663.861488][T15765] __x64_sys_mkdir+0x60/0x70 [ 663.861502][T15765] do_syscall_64+0xf7/0x1c0 [ 663.861518][T15765] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 663.861527][T15765] RIP: 0033:0x458e77 [ 663.861537][T15765] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 663.861543][T15765] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 663.861551][T15765] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 663.861560][T15765] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 663.870522][T15765] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 663.870528][T15765] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 03:08:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x8000000}}}}]}, 0x48}}, 0x0) 03:08:00 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./bus\x00', 0x0, 0x8}, 0x10) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f00000000c0)) 03:08:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x34000}}}}]}, 0x48}}, 0x0) [ 663.870534][T15765] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 664.051842][T15768] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 664.059934][T15768] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:01 executing program 4 (fault-call:0 fault-nth:45): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x5) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 664.179309][T15777] FAULT_INJECTION: forcing a failure. [ 664.179309][T15777] name failslab, interval 1, probability 0, space 0, times 0 [ 664.221189][T15777] CPU: 0 PID: 15777 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 664.229121][T15777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.239289][T15777] Call Trace: [ 664.242627][T15777] dump_stack+0x1d8/0x2f8 [ 664.246982][T15777] should_fail+0x555/0x770 [ 664.251403][T15777] __should_failslab+0x11a/0x160 [ 664.256347][T15777] should_failslab+0x9/0x20 [ 664.260845][T15777] kmem_cache_alloc_trace+0x5d/0x2f0 [ 664.266304][T15777] ? smack_d_instantiate+0x962/0xd70 [ 664.271690][T15777] smack_d_instantiate+0x962/0xd70 [ 664.276810][T15777] ? lockdep_init_map+0x2a/0x680 [ 664.281847][T15777] security_d_instantiate+0xa5/0x100 [ 664.287126][T15777] d_instantiate_new+0x65/0x120 [ 664.287142][T15777] ext4_mkdir+0xfa9/0x1450 [ 664.287171][T15777] vfs_mkdir+0x43f/0x610 [ 664.287189][T15777] do_mkdirat+0x1d7/0x320 [ 664.287205][T15777] __x64_sys_mkdir+0x60/0x70 [ 664.287222][T15777] do_syscall_64+0xf7/0x1c0 [ 664.304987][T15777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.319912][T15777] RIP: 0033:0x458e77 [ 664.319923][T15777] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.319929][T15777] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 664.319940][T15777] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 664.319946][T15777] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 664.319952][T15777] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 664.319958][T15777] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 664.319964][T15777] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 664.436015][T15784] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 664.451802][T15784] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 664.452379][T15787] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:08:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x9000000}}}}]}, 0x48}}, 0x0) 03:08:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x400300}}}}]}, 0x48}}, 0x0) 03:08:01 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:01 executing program 4 (fault-call:0 fault-nth:46): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 664.540679][T15793] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 664.551194][ C1] net_ratelimit: 16 callbacks suppressed [ 664.551200][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.562689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 664.594651][T15793] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 664.624551][T15801] FAULT_INJECTION: forcing a failure. [ 664.624551][T15801] name failslab, interval 1, probability 0, space 0, times 0 [ 664.651196][T15801] CPU: 0 PID: 15801 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 664.659147][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.669300][T15801] Call Trace: [ 664.669319][T15801] dump_stack+0x1d8/0x2f8 [ 664.669333][T15801] should_fail+0x555/0x770 [ 664.683795][T15801] __should_failslab+0x11a/0x160 [ 664.688746][T15801] ? kcalloc+0x2f/0x50 [ 664.688758][T15801] should_failslab+0x9/0x20 03:08:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 664.688768][T15801] __kmalloc+0x7a/0x340 [ 664.688782][T15801] kcalloc+0x2f/0x50 [ 664.698097][T15801] ext4_find_extent+0x216/0xaa0 [ 664.698112][T15801] ? trace_ext4_ext_map_blocks_enter+0x2ca/0x310 [ 664.698130][T15801] ext4_ext_map_blocks+0x170/0x7170 [ 664.698152][T15801] ? trace_lock_acquire+0x159/0x1d0 [ 664.710997][T15801] ? __kasan_check_write+0x14/0x20 [ 664.711014][T15801] ext4_map_blocks+0x8f4/0x1e30 [ 664.711032][T15801] ? __kasan_check_write+0x14/0x20 [ 664.722527][T15801] ext4_getblk+0xae/0x460 [ 664.722545][T15801] ext4_bread+0x4a/0x340 03:08:01 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x40020a) write$cgroup_int(r1, &(0x7f0000000080), 0x12) getsockname(r1, &(0x7f00000001c0)=@can, &(0x7f0000000140)=0x80) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[], [{@fowner_gt={'fowner>', r3}}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '#nodev}\x98selinux'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r5}}, {@hash='hash'}]}) [ 664.722559][T15801] ext4_append+0x175/0x310 [ 664.722575][T15801] ext4_mkdir+0x7ad/0x1450 [ 664.722602][T15801] vfs_mkdir+0x43f/0x610 [ 664.722618][T15801] do_mkdirat+0x1d7/0x320 [ 664.722633][T15801] __x64_sys_mkdir+0x60/0x70 [ 664.722646][T15801] do_syscall_64+0xf7/0x1c0 [ 664.722661][T15801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 664.722671][T15801] RIP: 0033:0x458e77 [ 664.722681][T15801] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 664.722686][T15801] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 664.737789][T15801] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 664.737796][T15801] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 664.737802][T15801] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 664.737808][T15801] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 664.737815][T15801] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 664.807990][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.808039][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 664.808120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 664.808159][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:01 executing program 4 (fault-call:0 fault-nth:47): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 664.979998][T15812] FAULT_INJECTION: forcing a failure. [ 664.979998][T15812] name failslab, interval 1, probability 0, space 0, times 0 03:08:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xa000000}}}}]}, 0x48}}, 0x0) 03:08:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x1000000}}}}]}, 0x48}}, 0x0) 03:08:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 665.041853][T15812] CPU: 1 PID: 15812 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 665.049775][T15812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.059827][T15812] Call Trace: [ 665.059845][T15812] dump_stack+0x1d8/0x2f8 [ 665.059860][T15812] should_fail+0x555/0x770 [ 665.059877][T15812] __should_failslab+0x11a/0x160 [ 665.059896][T15812] ? kcalloc+0x2f/0x50 [ 665.081522][T15812] should_failslab+0x9/0x20 [ 665.086017][T15812] __kmalloc+0x7a/0x340 [ 665.086034][T15812] kcalloc+0x2f/0x50 [ 665.086048][T15812] ext4_find_extent+0x216/0xaa0 [ 665.094589][T15812] ? trace_ext4_ext_map_blocks_enter+0x2ca/0x310 [ 665.094604][T15812] ext4_ext_map_blocks+0x170/0x7170 [ 665.094629][T15812] ? trace_lock_acquire+0x159/0x1d0 [ 665.105793][T15812] ? __kasan_check_write+0x14/0x20 [ 665.105809][T15812] ext4_map_blocks+0x8f4/0x1e30 [ 665.105829][T15812] ? __kasan_check_write+0x14/0x20 [ 665.105841][T15812] ext4_getblk+0xae/0x460 [ 665.105857][T15812] ext4_bread+0x4a/0x340 [ 665.105871][T15812] ext4_append+0x175/0x310 [ 665.116307][T15812] ext4_mkdir+0x7ad/0x1450 [ 665.116337][T15812] vfs_mkdir+0x43f/0x610 [ 665.116354][T15812] do_mkdirat+0x1d7/0x320 [ 665.116369][T15812] __x64_sys_mkdir+0x60/0x70 [ 665.126280][T15812] do_syscall_64+0xf7/0x1c0 [ 665.126297][T15812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.126310][T15812] RIP: 0033:0x458e77 03:08:02 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'nr0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000809000058ffffff345759dc7e49dcb14bb401dbeb1fb762a12b705173f53e1c146b04d7bcef9e63db"]}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r6, 0x0) r7 = getpgrp(0x0) sendmsg$netlink(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r7, 0x0, r6}}}], 0x20}, 0x0) fchown(r0, r2, r6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="75707065726469723d2e2f666bd250712c6c6f7765726469723d2e2f6275732c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f6e2c001e1052f24e81765a436c14c3c444db39bc"]) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r8, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r8, 0x5201) [ 665.135701][T15812] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.135707][T15812] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 665.135718][T15812] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 665.135724][T15812] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 665.135734][T15812] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 665.135740][T15812] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 665.135746][T15812] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 665.144574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 665.144623][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 665.271192][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 665.277051][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:02 executing program 4 (fault-call:0 fault-nth:48): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 665.337662][T15830] overlayfs: failed to resolve './fkÒPq': -2 [ 665.390330][T15835] FAULT_INJECTION: forcing a failure. [ 665.390330][T15835] name failslab, interval 1, probability 0, space 0, times 0 [ 665.404751][T15835] CPU: 1 PID: 15835 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 665.412652][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.412657][T15835] Call Trace: [ 665.412675][T15835] dump_stack+0x1d8/0x2f8 [ 665.412696][T15835] should_fail+0x555/0x770 [ 665.412717][T15835] __should_failslab+0x11a/0x160 [ 665.412732][T15835] ? ext4_mb_new_blocks+0x2ac/0x2cc0 [ 665.412745][T15835] should_failslab+0x9/0x20 [ 665.412757][T15835] kmem_cache_alloc+0x56/0x2e0 [ 665.412769][T15835] ext4_mb_new_blocks+0x2ac/0x2cc0 [ 665.412779][T15835] ? trace_kmalloc+0xcd/0x130 [ 665.412790][T15835] ? kcalloc+0x2f/0x50 [ 665.412800][T15835] ? __kmalloc+0x26c/0x340 [ 665.412808][T15835] ? kcalloc+0x2f/0x50 [ 665.412822][T15835] ? ext4_ext_search_right+0x4cb/0x940 [ 665.412833][T15835] ? ext4_find_extent+0x8e0/0xaa0 [ 665.412850][T15835] ? ext4_inode_to_goal_block+0x27b/0x3b0 [ 665.412863][T15835] ext4_ext_map_blocks+0x4b8c/0x7170 [ 665.412910][T15835] ext4_map_blocks+0x8f4/0x1e30 [ 665.412931][T15835] ? __kasan_check_write+0x14/0x20 [ 665.412945][T15835] ext4_getblk+0xae/0x460 [ 665.412961][T15835] ext4_bread+0x4a/0x340 [ 665.412973][T15835] ext4_append+0x175/0x310 [ 665.430622][T15835] ext4_mkdir+0x7ad/0x1450 [ 665.430652][T15835] vfs_mkdir+0x43f/0x610 [ 665.430669][T15835] do_mkdirat+0x1d7/0x320 [ 665.430686][T15835] __x64_sys_mkdir+0x60/0x70 [ 665.430700][T15835] do_syscall_64+0xf7/0x1c0 [ 665.440015][T15835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 665.440026][T15835] RIP: 0033:0x458e77 [ 665.440036][T15835] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 665.440042][T15835] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 665.440052][T15835] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 03:08:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 665.440059][T15835] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 665.440065][T15835] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 665.440070][T15835] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 665.440076][T15835] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:02 executing program 4 (fault-call:0 fault-nth:49): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 665.696937][T15842] overlayfs: failed to resolve './fkÒPq': -2 [ 665.738237][T15849] FAULT_INJECTION: forcing a failure. [ 665.738237][T15849] name failslab, interval 1, probability 0, space 0, times 0 [ 665.751319][T15849] CPU: 0 PID: 15849 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 665.759214][T15849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.769267][T15849] Call Trace: [ 665.772561][T15849] dump_stack+0x1d8/0x2f8 [ 665.776890][T15849] should_fail+0x555/0x770 [ 665.781348][T15849] __should_failslab+0x11a/0x160 03:08:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x2000000}}}}]}, 0x48}}, 0x0) 03:08:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 665.786289][T15849] ? __sigqueue_alloc+0x2ce/0x440 [ 665.791315][T15849] should_failslab+0x9/0x20 [ 665.795806][T15849] kmem_cache_alloc+0x56/0x2e0 [ 665.795823][T15849] __sigqueue_alloc+0x2ce/0x440 [ 665.795836][T15849] __send_signal+0x508/0xcd0 [ 665.795853][T15849] send_signal+0x6e0/0x830 [ 665.795868][T15849] force_sig_info_to_task+0x247/0x2e0 [ 665.819778][T15849] force_sig_fault+0xbf/0x130 [ 665.824467][T15849] __bad_area_nosemaphore+0x307/0x470 [ 665.824485][T15849] bad_area+0x6b/0x80 [ 665.824498][T15849] do_user_addr_fault+0xacc/0xaf0 03:08:02 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x21, 0x1}, 0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000080)='./file1\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@index_off='index=off'}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}], [{@fsmagic={'fsmagic', 0x3d, 0xa28f}}, {@context={'context', 0x3d, 'unconfined_u'}}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32=0x0], &(0x7f000095dffc)=0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r4, @in={{0x2, 0x4e22, @rand_addr=0x8}}}, &(0x7f00000000c0)=0x84) [ 665.824518][T15849] __do_page_fault+0xd3/0x1f0 [ 665.824529][T15849] do_page_fault+0x99/0xb0 [ 665.824543][T15849] page_fault+0x39/0x40 [ 665.824554][T15849] RIP: 0033:0x45365f [ 665.838874][T15849] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 665.838880][T15849] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00010283 03:08:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xb000000}}}}]}, 0x48}}, 0x0) [ 665.838890][T15849] RAX: 00007fd89d2b3b40 RBX: 0000000020000068 RCX: 0000000000000000 [ 665.838896][T15849] RDX: 00000000000000e0 RSI: 0000000000000000 RDI: 00007fd89d2b3b40 [ 665.838902][T15849] RBP: 0000000000000001 R08: 00000000000000e0 R09: 000000000000000a [ 665.838909][T15849] R10: 0000000000000075 R11: 00000000004e5d00 R12: 0000000000000004 [ 665.838915][T15849] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:02 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 665.953922][T15863] overlayfs: unrecognized mount option "fsmagic=0x000000000000a28f" or missing value 03:08:02 executing program 4 (fault-call:0 fault-nth:50): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x3000000}}}}]}, 0x48}}, 0x0) 03:08:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 666.119485][T15873] FAULT_INJECTION: forcing a failure. [ 666.119485][T15873] name failslab, interval 1, probability 0, space 0, times 0 [ 666.157785][T15873] CPU: 0 PID: 15873 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 666.165712][T15873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.165717][T15873] Call Trace: [ 666.165735][T15873] dump_stack+0x1d8/0x2f8 [ 666.165751][T15873] should_fail+0x555/0x770 [ 666.165768][T15873] __should_failslab+0x11a/0x160 [ 666.165779][T15873] ? kzalloc+0x1f/0x40 [ 666.165790][T15873] should_failslab+0x9/0x20 [ 666.165800][T15873] __kmalloc+0x7a/0x340 [ 666.165813][T15873] kzalloc+0x1f/0x40 [ 666.165821][T15873] smk_parse_smack+0x197/0x230 [ 666.165832][T15873] smk_import_entry+0x27/0x590 [ 666.165850][T15873] smack_d_instantiate+0x78f/0xd70 [ 666.192792][T15873] ? lockdep_init_map+0x2a/0x680 [ 666.192809][T15873] security_d_instantiate+0xa5/0x100 [ 666.192821][T15873] d_instantiate_new+0x65/0x120 [ 666.192832][T15873] ext4_mkdir+0xfa9/0x1450 [ 666.192862][T15873] vfs_mkdir+0x43f/0x610 [ 666.192878][T15873] do_mkdirat+0x1d7/0x320 [ 666.192892][T15873] __x64_sys_mkdir+0x60/0x70 [ 666.192905][T15873] do_syscall_64+0xf7/0x1c0 [ 666.192921][T15873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.192930][T15873] RIP: 0033:0x458e77 [ 666.192940][T15873] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.192946][T15873] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 666.192958][T15873] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 666.205626][T15873] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 666.205633][T15873] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 666.205639][T15873] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 666.205645][T15873] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xc000000}}}}]}, 0x48}}, 0x0) 03:08:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:03 executing program 4 (fault-call:0 fault-nth:51): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x4000000}}}}]}, 0x48}}, 0x0) [ 666.504334][T15891] FAULT_INJECTION: forcing a failure. [ 666.504334][T15891] name failslab, interval 1, probability 0, space 0, times 0 [ 666.539543][T15891] CPU: 0 PID: 15891 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 666.547464][T15891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.547470][T15891] Call Trace: [ 666.547487][T15891] dump_stack+0x1d8/0x2f8 [ 666.547501][T15891] should_fail+0x555/0x770 [ 666.569559][T15891] __should_failslab+0x11a/0x160 [ 666.574497][T15891] should_failslab+0x9/0x20 [ 666.579000][T15891] kmem_cache_alloc_trace+0x5d/0x2f0 [ 666.584282][T15891] ? smack_d_instantiate+0x962/0xd70 [ 666.589576][T15891] smack_d_instantiate+0x962/0xd70 [ 666.594694][T15891] ? lockdep_init_map+0x2a/0x680 [ 666.599633][T15891] security_d_instantiate+0xa5/0x100 [ 666.599647][T15891] d_instantiate_new+0x65/0x120 [ 666.599664][T15891] ext4_mkdir+0xfa9/0x1450 [ 666.614175][T15891] vfs_mkdir+0x43f/0x610 [ 666.618417][T15891] do_mkdirat+0x1d7/0x320 [ 666.622763][T15891] __x64_sys_mkdir+0x60/0x70 [ 666.627342][T15891] do_syscall_64+0xf7/0x1c0 [ 666.627358][T15891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.627370][T15891] RIP: 0033:0x458e77 [ 666.641621][T15891] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 666.661210][T15891] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 666.661220][T15891] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 666.661226][T15891] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 666.661232][T15891] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 666.661238][T15891] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 666.661244][T15891] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 666.711313][T15896] overlayfs: unrecognized mount option "fsmagic=0x000000000000a28f" or missing value 03:08:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008112, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r1, &(0x7f0000009100)={&(0x7f0000008d40)=@hci, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008dc0)=""/15, 0xf}, {&(0x7f0000000080)=""/83, 0x53}, {0x0}, {&(0x7f0000008f40)=""/121, 0x79}], 0x4, &(0x7f0000009000)=""/242, 0xf2}, 0x1) poll(&(0x7f0000000040)=[{r1, 0x6000}], 0x1, 0xfff) mkdir(&(0x7f0000000400)='./file0\x00', 0x1c0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:08:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:03 executing program 4 (fault-call:0 fault-nth:52): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 666.881040][T15904] FAULT_INJECTION: forcing a failure. [ 666.881040][T15904] name failslab, interval 1, probability 0, space 0, times 0 [ 666.911235][T15904] CPU: 0 PID: 15904 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 666.919183][T15904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.929237][T15904] Call Trace: [ 666.932537][T15904] dump_stack+0x1d8/0x2f8 [ 666.936871][T15904] should_fail+0x555/0x770 [ 666.941298][T15904] __should_failslab+0x11a/0x160 [ 666.946269][T15904] should_failslab+0x9/0x20 [ 666.950776][T15904] kmem_cache_alloc_trace+0x5d/0x2f0 [ 666.956061][T15904] ? smack_d_instantiate+0xabf/0xd70 [ 666.961350][T15904] smack_d_instantiate+0xabf/0xd70 [ 666.966467][T15904] ? lockdep_init_map+0x2a/0x680 [ 666.971410][T15904] security_d_instantiate+0xa5/0x100 [ 666.976697][T15904] d_instantiate_new+0x65/0x120 03:08:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xf000000}}}}]}, 0x48}}, 0x0) 03:08:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x5000000}}}}]}, 0x48}}, 0x0) 03:08:03 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xb) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 666.981569][T15904] ext4_mkdir+0xfa9/0x1450 [ 666.985994][T15904] vfs_mkdir+0x43f/0x610 [ 666.986012][T15904] do_mkdirat+0x1d7/0x320 [ 666.986027][T15904] __x64_sys_mkdir+0x60/0x70 [ 666.999133][T15904] do_syscall_64+0xf7/0x1c0 [ 666.999150][T15904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 666.999158][T15904] RIP: 0033:0x458e77 [ 666.999170][T15904] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 667.009517][T15904] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 667.009528][T15904] RAX: ffffffffffffffda RBX: 0000000020000068 RCX: 0000000000458e77 [ 667.009535][T15904] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 667.009541][T15904] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 667.009547][T15904] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 667.009554][T15904] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x10000000}}}}]}, 0x48}}, 0x0) 03:08:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x6000000}}}}]}, 0x48}}, 0x0) 03:08:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:04 executing program 4 (fault-call:0 fault-nth:53): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 667.326681][T15932] FAULT_INJECTION: forcing a failure. [ 667.326681][T15932] name failslab, interval 1, probability 0, space 0, times 0 [ 667.339324][T15932] CPU: 1 PID: 15932 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 667.339332][T15932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.339336][T15932] Call Trace: [ 667.339354][T15932] dump_stack+0x1d8/0x2f8 [ 667.339367][T15932] should_fail+0x555/0x770 [ 667.339383][T15932] __should_failslab+0x11a/0x160 [ 667.339394][T15932] ? __sigqueue_alloc+0x2ce/0x440 [ 667.339404][T15932] should_failslab+0x9/0x20 [ 667.339414][T15932] kmem_cache_alloc+0x56/0x2e0 [ 667.339428][T15932] __sigqueue_alloc+0x2ce/0x440 [ 667.339439][T15932] __send_signal+0x508/0xcd0 [ 667.339456][T15932] send_signal+0x6e0/0x830 [ 667.339471][T15932] force_sig_info_to_task+0x247/0x2e0 [ 667.339489][T15932] force_sig_fault+0xbf/0x130 [ 667.339513][T15932] __bad_area_nosemaphore+0x307/0x470 [ 667.339530][T15932] bad_area+0x6b/0x80 [ 667.369830][T15932] do_user_addr_fault+0xacc/0xaf0 [ 667.369853][T15932] __do_page_fault+0xd3/0x1f0 [ 667.369867][T15932] do_page_fault+0x99/0xb0 [ 667.369880][T15932] page_fault+0x39/0x40 [ 667.369894][T15932] RIP: 0033:0x45365f [ 667.379831][T15932] Code: bc d1 f3 0f 7f 27 f3 0f 7f 6f 10 f3 0f 7f 77 20 f3 0f 7f 7f 30 49 83 c0 0f 49 29 d0 48 8d 7c 17 31 e9 95 0b 00 00 66 0f ef c0 0f 6f 0e f3 0f 6f 56 10 66 0f 74 c1 66 0f d7 d0 49 83 f8 11 0f [ 667.379836][T15932] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00010283 [ 667.379846][T15932] RAX: 00007fd89d2b3b40 RBX: 0000000020000068 RCX: 0000000000000000 [ 667.379852][T15932] RDX: 00000000000000e0 RSI: 0000000000000000 RDI: 00007fd89d2b3b40 [ 667.379858][T15932] RBP: 0000000000000001 R08: 00000000000000e0 R09: 000000000000000a [ 667.379864][T15932] R10: 0000000000000075 R11: 00000000004e5d00 R12: 0000000000000004 [ 667.379870][T15932] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:04 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x11000000}}}}]}, 0x48}}, 0x0) 03:08:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x8000000}}}}]}, 0x48}}, 0x0) [ 667.726578][T15936] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:08:04 executing program 4 (fault-call:0 fault-nth:54): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:04 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f0000009100)={&(0x7f0000008d40)=@hci, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008dc0)=""/22, 0x16}, {&(0x7f0000008e00)=""/83, 0x53}, {0x0, 0x256}, {&(0x7f0000008f40)=""/121, 0x79}], 0x4, &(0x7f0000009000)=""/242, 0xf2}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="ac1e0101fffdd1595a00000007ac1e0001e0000002fffff921ffffffff7f000001e0000002ffffffff"], 0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x40020a) write$cgroup_int(r3, &(0x7f0000000080), 0x12) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x9}, &(0x7f0000000300)=0x8) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x40020a) write$cgroup_int(r5, &(0x7f0000000080), 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) ioprio_get$uid(0x5, r7) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f00000000c0)={0x7f, 'syz0\x00'}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./fi\x00\x000,metacopy=on,\x00']) [ 667.808849][T15945] FAULT_INJECTION: forcing a failure. [ 667.808849][T15945] name failslab, interval 1, probability 0, space 0, times 0 [ 667.851668][T15945] CPU: 1 PID: 15945 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 667.859595][T15945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.869651][T15945] Call Trace: [ 667.872941][T15945] dump_stack+0x1d8/0x2f8 [ 667.877277][T15945] should_fail+0x555/0x770 [ 667.877296][T15945] __should_failslab+0x11a/0x160 [ 667.877308][T15945] ? ksys_mount+0x38/0x100 [ 667.877320][T15945] should_failslab+0x9/0x20 [ 667.877331][T15945] __kmalloc_track_caller+0x79/0x340 [ 667.877348][T15945] strndup_user+0x76/0x130 [ 667.886689][T15945] ksys_mount+0x38/0x100 [ 667.886703][T15945] __x64_sys_mount+0xbf/0xd0 [ 667.886718][T15945] do_syscall_64+0xf7/0x1c0 [ 667.886733][T15945] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.886743][T15945] RIP: 0033:0x45c4aa [ 667.886752][T15945] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 667.886761][T15945] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 667.895654][T15945] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 667.895660][T15945] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 667.895666][T15945] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 667.895672][T15945] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 667.895679][T15945] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:04 executing program 4 (fault-call:0 fault-nth:55): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 668.103126][T15958] FAULT_INJECTION: forcing a failure. [ 668.103126][T15958] name failslab, interval 1, probability 0, space 0, times 0 [ 668.116546][T15958] CPU: 0 PID: 15958 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 668.124451][T15958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.134513][T15958] Call Trace: [ 668.137806][T15958] dump_stack+0x1d8/0x2f8 [ 668.142136][T15958] should_fail+0x555/0x770 [ 668.146559][T15958] __should_failslab+0x11a/0x160 [ 668.151491][T15958] ? ksys_mount+0x6a/0x100 [ 668.155904][T15958] should_failslab+0x9/0x20 [ 668.160411][T15958] __kmalloc_track_caller+0x79/0x340 [ 668.165704][T15958] strndup_user+0x76/0x130 [ 668.170116][T15958] ksys_mount+0x6a/0x100 [ 668.174358][T15958] __x64_sys_mount+0xbf/0xd0 [ 668.178973][T15958] do_syscall_64+0xf7/0x1c0 [ 668.183481][T15958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.189365][T15958] RIP: 0033:0x45c4aa [ 668.193251][T15958] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 668.212858][T15958] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 668.221267][T15958] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 668.229237][T15958] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 668.237215][T15958] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 668.245181][T15958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 03:08:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xf) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 668.253147][T15958] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:05 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) socketpair(0x5, 0x4, 0x40, &(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='9p\x00', 0x41059, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2f5064b27f6f3d", @ANYRESHEX=r0, @ANYBLOB="2c6e6f6465766d61702c6d6d61702c6f626a5f747970653d47504c2424e076626f786e657430706f7369785f61636c5f61636365737326706f7369785f61636c5f6163636573732f5c2c736d61636b6673726f6f743d2c6f626a5f726f6c653d75707065726469722c00"]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x2}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:08:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x9000000}}}}]}, 0x48}}, 0x0) 03:08:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x12000000}}}}]}, 0x48}}, 0x0) 03:08:05 executing program 4 (fault-call:0 fault-nth:56): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 668.425038][T15963] validate_nla: 22 callbacks suppressed [ 668.425044][T15963] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 668.457559][T15963] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 668.508543][T15977] FAULT_INJECTION: forcing a failure. [ 668.508543][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 668.543535][T15977] CPU: 0 PID: 15977 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 668.546416][T15980] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 668.551479][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.551484][T15977] Call Trace: [ 668.551503][T15977] dump_stack+0x1d8/0x2f8 [ 668.551519][T15977] should_fail+0x555/0x770 [ 668.551537][T15977] __should_failslab+0x11a/0x160 [ 668.551550][T15977] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 668.551560][T15977] should_failslab+0x9/0x20 [ 668.551571][T15977] __kmalloc+0x7a/0x340 [ 668.551578][T15977] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 668.551590][T15977] tomoyo_realpath_from_path+0xdc/0x7c0 [ 668.551609][T15977] tomoyo_mount_permission+0x923/0xa30 [ 668.551632][T15977] ? kmem_cache_free+0xd8/0xf0 [ 668.551660][T15977] tomoyo_sb_mount+0x35/0x40 [ 668.568615][T15980] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 668.569777][T15977] security_sb_mount+0x84/0xe0 [ 668.569793][T15977] do_mount+0x10a/0x2510 [ 668.569807][T15977] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 668.569815][T15977] ? copy_mount_options+0x5f/0x3c0 [ 668.569831][T15977] ? copy_mount_options+0x308/0x3c0 [ 668.659837][T15977] ksys_mount+0xcc/0x100 [ 668.664081][T15977] __x64_sys_mount+0xbf/0xd0 [ 668.669286][T15977] do_syscall_64+0xf7/0x1c0 [ 668.673797][T15977] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.679685][T15977] RIP: 0033:0x45c4aa [ 668.683572][T15977] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 03:08:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 668.703169][T15977] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 668.711576][T15977] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 668.719544][T15977] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 668.727506][T15977] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 668.735470][T15977] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 668.743434][T15977] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x13000000}}}}]}, 0x48}}, 0x0) 03:08:05 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xa000000}}}}]}, 0x48}}, 0x0) [ 668.804800][T15983] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 668.814315][T15984] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:08:05 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r0, 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 668.846825][T15983] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 668.907380][T15977] ERROR: Out of memory at tomoyo_realpath_from_path. 03:08:05 executing program 4 (fault-call:0 fault-nth:57): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 669.028318][T15999] FAULT_INJECTION: forcing a failure. [ 669.028318][T15999] name failslab, interval 1, probability 0, space 0, times 0 [ 669.051847][T15996] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 669.061717][T15996] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 669.076363][T15999] CPU: 0 PID: 15999 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 669.084274][T15999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.094329][T15999] Call Trace: [ 669.097617][T15999] dump_stack+0x1d8/0x2f8 [ 669.101952][T15999] should_fail+0x555/0x770 [ 669.106491][T15999] __should_failslab+0x11a/0x160 [ 669.111514][T15999] should_failslab+0x9/0x20 [ 669.116012][T15999] kmem_cache_alloc_trace+0x5d/0x2f0 [ 669.121289][T15999] ? copy_mount_options+0x5f/0x3c0 [ 669.126403][T15999] copy_mount_options+0x5f/0x3c0 [ 669.131336][T15999] ksys_mount+0xa0/0x100 [ 669.135578][T15999] __x64_sys_mount+0xbf/0xd0 [ 669.140165][T15999] do_syscall_64+0xf7/0x1c0 [ 669.144775][T15999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.150752][T15999] RIP: 0033:0x45c4aa [ 669.154636][T15999] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 03:08:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 669.174319][T15999] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 669.182726][T15999] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 669.190693][T15999] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 669.198660][T15999] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 669.206805][T15999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 669.214784][T15999] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 669.278988][T16002] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:08:06 executing program 4 (fault-call:0 fault-nth:58): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x14000000}}}}]}, 0x48}}, 0x0) 03:08:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xb000000}}}}]}, 0x48}}, 0x0) 03:08:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x11) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:06 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xe9, &(0x7f00000002c0)="c5c4cc102e2cf7e2d3f04296f699ef4cf819c6701305806aa37d5b0100000003b9731a45331b5277922ad8067be4cafd247243b64687dd247f5fe003c84917f837d085d70ae178cd17373890dff5ac1489d4b27d32d89e20ddf3fac9871594f2809efdead87ef0d4c21afebdfd16926b45cbe2ebdf9f786cc2d21906d9ed7d4f03d9b396a0b40e060000420f3c5517f9712d6d5fa5158f") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 669.346731][T16008] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 669.372892][T16008] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 669.419325][T16010] FAULT_INJECTION: forcing a failure. [ 669.419325][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 669.526908][T16010] CPU: 1 PID: 16010 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 669.534834][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.544886][T16010] Call Trace: [ 669.548177][T16010] dump_stack+0x1d8/0x2f8 [ 669.552511][T16010] should_fail+0x555/0x770 [ 669.556933][T16010] __should_failslab+0x11a/0x160 [ 669.561867][T16010] should_failslab+0x9/0x20 [ 669.566362][T16010] kmem_cache_alloc_trace+0x5d/0x2f0 [ 669.571664][T16010] ? copy_mount_options+0x5f/0x3c0 [ 669.576785][T16010] copy_mount_options+0x5f/0x3c0 [ 669.581720][T16010] ksys_mount+0xa0/0x100 [ 669.585956][T16010] __x64_sys_mount+0xbf/0xd0 [ 669.590540][T16010] do_syscall_64+0xf7/0x1c0 [ 669.595041][T16010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.600923][T16010] RIP: 0033:0x45c4aa [ 669.604811][T16010] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 669.624408][T16010] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 669.632810][T16010] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 669.640774][T16010] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 669.648748][T16010] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 669.656709][T16010] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 669.664676][T16010] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:06 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:08:06 executing program 4 (fault-call:0 fault-nth:59): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:06 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x12) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x18000000}}}}]}, 0x48}}, 0x0) 03:08:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xc000000}}}}]}, 0x48}}, 0x0) [ 669.833482][T16030] FAULT_INJECTION: forcing a failure. [ 669.833482][T16030] name failslab, interval 1, probability 0, space 0, times 0 [ 669.844017][T16033] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 669.891791][T16030] CPU: 0 PID: 16030 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 669.899728][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.909877][T16030] Call Trace: [ 669.911186][ C1] net_ratelimit: 24 callbacks suppressed [ 669.911192][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 669.913167][T16030] dump_stack+0x1d8/0x2f8 [ 669.913183][T16030] should_fail+0x555/0x770 [ 669.913199][T16030] __should_failslab+0x11a/0x160 03:08:06 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) uselib(&(0x7f0000000040)='./bus\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:08:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 669.918862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 669.924520][T16030] ? getname_kernel+0x59/0x2f0 [ 669.924531][T16030] should_failslab+0x9/0x20 [ 669.924541][T16030] kmem_cache_alloc+0x56/0x2e0 [ 669.924551][T16030] getname_kernel+0x59/0x2f0 [ 669.924561][T16030] kern_path+0x1f/0x40 [ 669.924573][T16030] tomoyo_mount_permission+0x7f1/0xa30 [ 669.924595][T16030] ? kmem_cache_free+0xd8/0xf0 [ 669.948661][T16030] tomoyo_sb_mount+0x35/0x40 [ 669.962558][T16030] security_sb_mount+0x84/0xe0 [ 669.962572][T16030] do_mount+0x10a/0x2510 [ 669.962580][T16030] ? copy_mount_options+0x278/0x3c0 [ 669.962594][T16030] ? __sanitizer_cov_trace_const_cmp4+0x80/0x90 [ 669.962603][T16030] ? copy_mount_options+0x308/0x3c0 [ 669.962614][T16030] ksys_mount+0xcc/0x100 [ 669.962626][T16030] __x64_sys_mount+0xbf/0xd0 [ 669.962640][T16030] do_syscall_64+0xf7/0x1c0 [ 669.962654][T16030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 669.962666][T16030] RIP: 0033:0x45c4aa [ 669.972152][T16030] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 669.972159][T16030] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 669.972168][T16030] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 669.972174][T16030] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 669.972179][T16030] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 669.972185][T16030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 669.972190][T16030] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:07 executing program 4 (fault-call:0 fault-nth:60): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xf000000}}}}]}, 0x48}}, 0x0) 03:08:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x13) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 670.181888][T16048] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 03:08:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x3f000000}}}}]}, 0x48}}, 0x0) 03:08:07 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) [ 670.268126][T16052] FAULT_INJECTION: forcing a failure. [ 670.268126][T16052] name failslab, interval 1, probability 0, space 0, times 0 [ 670.310906][T16052] CPU: 0 PID: 16052 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 670.318836][T16052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.328929][T16052] Call Trace: [ 670.332217][T16052] dump_stack+0x1d8/0x2f8 [ 670.332234][T16052] should_fail+0x555/0x770 [ 670.332252][T16052] __should_failslab+0x11a/0x160 [ 670.332265][T16052] ? tomoyo_encode2+0x273/0x5a0 [ 670.332275][T16052] should_failslab+0x9/0x20 [ 670.332285][T16052] __kmalloc+0x7a/0x340 [ 670.332298][T16052] tomoyo_encode2+0x273/0x5a0 [ 670.332313][T16052] tomoyo_encode+0x29/0x40 [ 670.346058][T16052] tomoyo_mount_permission+0x216/0xa30 [ 670.346074][T16052] ? filename_lookup+0x4b0/0x690 [ 670.346092][T16052] ? kmem_cache_free+0xd8/0xf0 [ 670.383952][T16052] tomoyo_sb_mount+0x35/0x40 [ 670.388547][T16052] security_sb_mount+0x84/0xe0 [ 670.393409][T16052] do_mount+0x10a/0x2510 [ 670.397651][T16052] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 670.403281][T16052] ? copy_mount_options+0x5f/0x3c0 [ 670.408506][T16052] ? copy_mount_options+0x308/0x3c0 [ 670.413709][T16052] ksys_mount+0xcc/0x100 [ 670.417950][T16052] __x64_sys_mount+0xbf/0xd0 [ 670.422554][T16052] do_syscall_64+0xf7/0x1c0 [ 670.427059][T16052] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.432950][T16052] RIP: 0033:0x45c4aa [ 670.436843][T16052] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 670.456780][T16052] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 670.465290][T16052] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 670.465296][T16052] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 670.465303][T16052] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 670.465307][T16052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 670.465312][T16052] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:07 executing program 4 (fault-call:0 fault-nth:61): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 670.603417][T16068] FAULT_INJECTION: forcing a failure. [ 670.603417][T16068] name failslab, interval 1, probability 0, space 0, times 0 [ 670.639765][T16068] CPU: 0 PID: 16068 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 670.647697][T16068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.657758][T16068] Call Trace: [ 670.661054][T16068] dump_stack+0x1d8/0x2f8 [ 670.665385][T16068] should_fail+0x555/0x770 [ 670.669808][T16068] __should_failslab+0x11a/0x160 [ 670.674745][T16068] ? tomoyo_encode2+0x273/0x5a0 [ 670.679591][T16068] should_failslab+0x9/0x20 [ 670.684095][T16068] __kmalloc+0x7a/0x340 [ 670.688253][T16068] tomoyo_encode2+0x273/0x5a0 [ 670.692932][T16068] tomoyo_encode+0x29/0x40 [ 670.697341][T16068] tomoyo_mount_permission+0x216/0xa30 [ 670.702799][T16068] ? filename_lookup+0x4b0/0x690 [ 670.707740][T16068] ? kmem_cache_free+0xd8/0xf0 [ 670.712520][T16068] tomoyo_sb_mount+0x35/0x40 [ 670.717110][T16068] security_sb_mount+0x84/0xe0 [ 670.721871][T16068] do_mount+0x10a/0x2510 [ 670.726108][T16068] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 670.731645][T16068] ? copy_mount_options+0x5f/0x3c0 [ 670.736751][T16068] ? copy_mount_options+0x308/0x3c0 [ 670.741947][T16068] ksys_mount+0xcc/0x100 [ 670.746183][T16068] __x64_sys_mount+0xbf/0xd0 [ 670.750775][T16068] do_syscall_64+0xf7/0x1c0 [ 670.755287][T16068] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 670.761178][T16068] RIP: 0033:0x45c4aa [ 670.765069][T16068] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 670.784671][T16068] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 670.791187][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:08:07 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x40000000}}}}]}, 0x48}}, 0x0) 03:08:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x10000000}}}}]}, 0x48}}, 0x0) [ 670.793074][T16068] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 670.793081][T16068] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 670.793087][T16068] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 670.793094][T16068] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 670.793100][T16068] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 670.838909][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:07 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:08:07 executing program 4 (fault-call:0 fault-nth:62): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 670.988833][T16083] FAULT_INJECTION: forcing a failure. [ 670.988833][T16083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 671.002069][T16083] CPU: 0 PID: 16083 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 671.010819][T16083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.020869][T16083] Call Trace: [ 671.024163][T16083] dump_stack+0x1d8/0x2f8 [ 671.028498][T16083] should_fail+0x555/0x770 [ 671.031207][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 671.032919][T16083] should_fail_alloc_page+0x55/0x60 [ 671.032929][T16083] prepare_alloc_pages+0x283/0x460 [ 671.032944][T16083] __alloc_pages_nodemask+0xb2/0x5d0 [ 671.032964][T16083] kmem_getpages+0x4d/0xa00 [ 671.038733][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 671.043868][T16083] cache_grow_begin+0x7e/0x2c0 [ 671.043881][T16083] cache_alloc_refill+0x311/0x3f0 [ 671.043890][T16083] ? check_preemption_disabled+0xb7/0x2a0 [ 671.043905][T16083] __kmalloc+0x318/0x340 [ 671.043913][T16083] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 671.043924][T16083] tomoyo_realpath_from_path+0xdc/0x7c0 [ 671.043943][T16083] tomoyo_mount_permission+0x923/0xa30 [ 671.049097][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 671.054288][T16083] ? kmem_cache_free+0xd8/0xf0 [ 671.054316][T16083] tomoyo_sb_mount+0x35/0x40 [ 671.058840][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 671.064511][T16083] security_sb_mount+0x84/0xe0 [ 671.064525][T16083] do_mount+0x10a/0x2510 [ 671.064537][T16083] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 671.084201][T16083] ? copy_mount_options+0x5f/0x3c0 [ 671.095415][T16083] ? copy_mount_options+0x308/0x3c0 [ 671.095426][T16083] ksys_mount+0xcc/0x100 [ 671.095438][T16083] __x64_sys_mount+0xbf/0xd0 [ 671.095453][T16083] do_syscall_64+0xf7/0x1c0 [ 671.095468][T16083] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.095477][T16083] RIP: 0033:0x45c4aa [ 671.095488][T16083] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 671.095493][T16083] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 671.095503][T16083] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 671.095508][T16083] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 671.095514][T16083] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 671.095520][T16083] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 671.095526][T16083] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:08 executing program 4 (fault-call:0 fault-nth:63): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 671.351199][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 671.357027][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:08:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:08 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x40020a) write$cgroup_int(r0, &(0x7f0000000080), 0x12) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x64, "df18140771b646bd25f28116f5b7e452fddde501d083622aac27b135d17d0d607465f5dc25ae61f8dbe4b385f3651a301523f6b2834f1c28b91ba32c063ea406cecbe6c2044664009235331d09aa9e56b647c665b7c2eee770224b52ab7033d2286babe9"}, &(0x7f00000000c0)=0x6c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x58, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0x3, @local, 0x80}, @in6={0xa, 0x4e20, 0x10001, @loopback, 0x3c}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on='metacopy=on'}]}) 03:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x11000000}}}}]}, 0x48}}, 0x0) 03:08:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x60000000}}}}]}, 0x48}}, 0x0) 03:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 671.630117][T16110] FAULT_INJECTION: forcing a failure. [ 671.630117][T16110] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 671.630464][T16109] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 671.643352][T16110] CPU: 0 PID: 16110 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 671.643359][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.643363][T16110] Call Trace: [ 671.643380][T16110] dump_stack+0x1d8/0x2f8 [ 671.643394][T16110] should_fail+0x555/0x770 [ 671.643410][T16110] should_fail_alloc_page+0x55/0x60 [ 671.643420][T16110] prepare_alloc_pages+0x283/0x460 [ 671.643434][T16110] __alloc_pages_nodemask+0xb2/0x5d0 [ 671.643455][T16110] kmem_getpages+0x4d/0xa00 [ 671.643470][T16110] cache_grow_begin+0x7e/0x2c0 [ 671.643483][T16110] cache_alloc_refill+0x311/0x3f0 [ 671.643493][T16110] ? check_preemption_disabled+0xb7/0x2a0 [ 671.643510][T16110] kmem_cache_alloc+0x2b9/0x2e0 [ 671.643522][T16110] ? getname_kernel+0x59/0x2f0 [ 671.732762][T16110] getname_kernel+0x59/0x2f0 [ 671.737351][T16110] kern_path+0x1f/0x40 [ 671.741429][T16110] tomoyo_mount_permission+0x7f1/0xa30 [ 671.746897][T16110] ? kmem_cache_free+0xd8/0xf0 [ 671.746930][T16110] tomoyo_sb_mount+0x35/0x40 [ 671.756251][T16110] security_sb_mount+0x84/0xe0 [ 671.756267][T16110] do_mount+0x10a/0x2510 [ 671.756279][T16110] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 671.756290][T16110] ? copy_mount_options+0x5f/0x3c0 [ 671.775880][T16110] ? copy_mount_options+0x308/0x3c0 [ 671.781078][T16110] ksys_mount+0xcc/0x100 [ 671.785314][T16110] __x64_sys_mount+0xbf/0xd0 [ 671.789900][T16110] do_syscall_64+0xf7/0x1c0 [ 671.794402][T16110] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 671.800286][T16110] RIP: 0033:0x45c4aa [ 671.804178][T16110] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 03:08:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x12000000}}}}]}, 0x48}}, 0x0) 03:08:08 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r2, 0x0, 0x0) recvfrom(r1, &(0x7f0000000080)=""/47, 0x2f, 0x10000, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x1, 0x2, 0x0, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x1f}, 0x3}}}, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x33, @multicast1, 0x4e20, 0x0, 'wlc\x00', 0x289b5769c676615e, 0xf7d, 0x46}, 0x2c) ioctl$VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000000c0)={0x20, 0x0, 0x7, 0x400, 0x3}) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC]) 03:08:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x65580000}}}}]}, 0x48}}, 0x0) 03:08:08 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x60) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 671.823781][T16110] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 671.832192][T16110] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 671.840156][T16110] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 671.848212][T16110] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 671.856193][T16110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 671.867373][T16110] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:08 executing program 4 (fault-call:0 fault-nth:64): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x308}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 672.051694][T16128] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 [ 672.071080][T16131] FAULT_INJECTION: forcing a failure. [ 672.071080][T16131] name failslab, interval 1, probability 0, space 0, times 0 [ 672.089057][T16128] overlayfs: unrecognized mount option "18446744073709551615" or missing value [ 672.107946][T16131] CPU: 1 PID: 16131 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 672.115859][T16131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.115864][T16131] Call Trace: [ 672.115882][T16131] dump_stack+0x1d8/0x2f8 [ 672.115896][T16131] should_fail+0x555/0x770 [ 672.115913][T16131] __should_failslab+0x11a/0x160 [ 672.129236][T16131] ? getname_kernel+0x59/0x2f0 [ 672.129248][T16131] should_failslab+0x9/0x20 [ 672.129259][T16131] kmem_cache_alloc+0x56/0x2e0 03:08:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x13000000}}}}]}, 0x48}}, 0x0) [ 672.129271][T16131] getname_kernel+0x59/0x2f0 [ 672.129283][T16131] kern_path+0x1f/0x40 [ 672.142911][T16131] tomoyo_mount_permission+0x7f1/0xa30 [ 672.142938][T16131] ? kmem_cache_free+0xd8/0xf0 [ 672.142964][T16131] tomoyo_sb_mount+0x35/0x40 [ 672.142980][T16131] security_sb_mount+0x84/0xe0 [ 672.152210][T16131] do_mount+0x10a/0x2510 [ 672.152223][T16131] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 672.152231][T16131] ? copy_mount_options+0x5f/0x3c0 [ 672.152244][T16131] ? copy_mount_options+0x308/0x3c0 [ 672.152256][T16131] ksys_mount+0xcc/0x100 [ 672.152270][T16131] __x64_sys_mount+0xbf/0xd0 [ 672.161583][T16131] do_syscall_64+0xf7/0x1c0 [ 672.161599][T16131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.161608][T16131] RIP: 0033:0x45c4aa [ 672.161619][T16131] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 672.175835][T16131] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 03:08:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x6a51dfaf}}}}]}, 0x48}}, 0x0) [ 672.175845][T16131] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 672.175852][T16131] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 672.175857][T16131] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 672.175864][T16131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 672.175869][T16131] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 672.188805][T16137] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20000 03:08:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:09 executing program 4 (fault-call:0 fault-nth:65): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3e7}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 672.415991][T16150] FAULT_INJECTION: forcing a failure. [ 672.415991][T16150] name failslab, interval 1, probability 0, space 0, times 0 [ 672.435587][T16150] CPU: 0 PID: 16150 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 672.443514][T16150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.456280][T16150] Call Trace: [ 672.456300][T16150] dump_stack+0x1d8/0x2f8 [ 672.456316][T16150] should_fail+0x555/0x770 [ 672.456339][T16150] __should_failslab+0x11a/0x160 [ 672.465217][T16150] ? tomoyo_encode2+0x273/0x5a0 [ 672.484249][T16150] should_failslab+0x9/0x20 [ 672.484259][T16150] __kmalloc+0x7a/0x340 [ 672.484272][T16150] tomoyo_encode2+0x273/0x5a0 [ 672.484287][T16150] tomoyo_realpath_from_path+0x769/0x7c0 [ 672.484307][T16150] tomoyo_mount_permission+0x923/0xa30 [ 672.484331][T16150] ? kmem_cache_free+0xd8/0xf0 [ 672.484356][T16150] tomoyo_sb_mount+0x35/0x40 [ 672.484370][T16150] security_sb_mount+0x84/0xe0 [ 672.501696][T16150] do_mount+0x10a/0x2510 [ 672.513570][T16150] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 672.513580][T16150] ? copy_mount_options+0x5f/0x3c0 [ 672.513593][T16150] ? copy_mount_options+0x308/0x3c0 [ 672.513609][T16150] ksys_mount+0xcc/0x100 [ 672.537181][T16150] __x64_sys_mount+0xbf/0xd0 [ 672.537197][T16150] do_syscall_64+0xf7/0x1c0 [ 672.537211][T16150] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.537223][T16150] RIP: 0033:0x45c4aa [ 672.553909][T16150] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 03:08:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 672.553916][T16150] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 672.553927][T16150] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 672.553933][T16150] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 672.553940][T16150] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 672.553945][T16150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 672.553951][T16150] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:09 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 672.562275][T16150] ERROR: Out of memory at tomoyo_realpath_from_path. 03:08:09 executing program 4 (fault-call:0 fault-nth:66): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x14000000}}}}]}, 0x48}}, 0x0) 03:08:09 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x500) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x81000000}}}}]}, 0x48}}, 0x0) 03:08:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 672.780354][T16162] FAULT_INJECTION: forcing a failure. [ 672.780354][T16162] name failslab, interval 1, probability 0, space 0, times 0 [ 672.810600][T16162] CPU: 1 PID: 16162 Comm: syz-executor.1 Not tainted 5.4.0-rc2+ #0 [ 672.818529][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.828587][T16162] Call Trace: [ 672.831900][T16162] dump_stack+0x1d8/0x2f8 [ 672.836318][T16162] should_fail+0x555/0x770 [ 672.836336][T16162] __should_failslab+0x11a/0x160 [ 672.836352][T16162] ? dst_alloc+0x173/0x580 [ 672.850075][T16162] should_failslab+0x9/0x20 [ 672.854580][T16162] kmem_cache_alloc+0x56/0x2e0 [ 672.854597][T16162] dst_alloc+0x173/0x580 [ 672.854612][T16162] ip_route_output_key_hash_rcu+0x1935/0x26b0 [ 672.854635][T16162] ip_route_output_key_hash+0x14e/0x260 [ 672.854653][T16162] ip_route_output_flow+0x29/0xc0 [ 672.854667][T16162] ? security_sk_classify_flow+0x8f/0xa0 [ 672.885819][T16162] raw_sendmsg+0x13a5/0x3790 [ 672.886923][T16164] FAULT_INJECTION: forcing a failure. [ 672.886923][T16164] name failslab, interval 1, probability 0, space 0, times 0 [ 672.890432][T16162] inet_sendmsg+0x147/0x310 [ 672.890447][T16162] ? security_socket_sendmsg+0xa0/0xd0 [ 672.907487][T16162] ? inet_send_prepare+0x250/0x250 [ 672.907502][T16162] sock_write_iter+0x2a6/0x3a0 [ 672.907526][T16162] __vfs_write+0x5a1/0x740 [ 672.907551][T16162] vfs_write+0x275/0x590 [ 672.907566][T16162] ksys_write+0x117/0x220 [ 672.907579][T16162] __x64_sys_write+0x7b/0x90 [ 672.918144][T16162] do_syscall_64+0xf7/0x1c0 [ 672.918161][T16162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 672.918171][T16162] RIP: 0033:0x459a59 [ 672.918181][T16162] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 672.918187][T16162] RSP: 002b:00007fe1b8b00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.918197][T16162] RAX: ffffffffffffffda RBX: 00007fe1b8b00c90 RCX: 0000000000459a59 [ 672.918208][T16162] RDX: 000000000000000b RSI: 00000000200001c0 RDI: 0000000000000003 [ 672.935860][T16162] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 672.950774][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1b8b016d4 [ 672.950781][T16162] R13: 00000000004c9e4b R14: 00000000004e1a48 R15: 0000000000000004 [ 673.001476][T16164] CPU: 0 PID: 16164 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 673.015453][T16164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.015458][T16164] Call Trace: [ 673.015474][T16164] dump_stack+0x1d8/0x2f8 [ 673.015487][T16164] should_fail+0x555/0x770 [ 673.015503][T16164] __should_failslab+0x11a/0x160 [ 673.015516][T16164] should_failslab+0x9/0x20 [ 673.015526][T16164] kmem_cache_alloc_trace+0x5d/0x2f0 [ 673.015533][T16164] ? alloc_fs_context+0x65/0x640 [ 673.015546][T16164] alloc_fs_context+0x65/0x640 03:08:09 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 673.031391][T16164] ? _raw_read_unlock+0x2c/0x50 [ 673.031403][T16164] ? get_fs_type+0x47f/0x500 [ 673.031416][T16164] fs_context_for_mount+0x24/0x30 [ 673.031425][T16164] do_mount+0x10a7/0x2510 [ 673.031439][T16164] ? copy_mount_options+0x308/0x3c0 [ 673.031454][T16164] ksys_mount+0xcc/0x100 [ 673.044790][T16164] __x64_sys_mount+0xbf/0xd0 [ 673.044805][T16164] do_syscall_64+0xf7/0x1c0 [ 673.044820][T16164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.053530][T16164] RIP: 0033:0x45c4aa [ 673.053540][T16164] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 673.053546][T16164] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 673.053554][T16164] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 673.053559][T16164] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 673.053564][T16164] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 673.053569][T16164] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 673.053574][T16164] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 673.206575][T16179] FAULT_INJECTION: forcing a failure. [ 673.206575][T16179] name failslab, interval 1, probability 0, space 0, times 0 [ 673.228446][T16179] CPU: 1 PID: 16179 Comm: syz-executor.1 Not tainted 5.4.0-rc2+ #0 [ 673.236358][T16179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.246414][T16179] Call Trace: [ 673.249713][T16179] dump_stack+0x1d8/0x2f8 [ 673.254043][T16179] should_fail+0x555/0x770 [ 673.258465][T16179] __should_failslab+0x11a/0x160 [ 673.263402][T16179] should_failslab+0x9/0x20 [ 673.267902][T16179] kmem_cache_alloc_node+0x65/0x280 [ 673.273104][T16179] ? __alloc_skb+0x9f/0x500 [ 673.277607][T16179] __alloc_skb+0x9f/0x500 [ 673.281940][T16179] __ip_append_data+0x2077/0x31a0 [ 673.286970][T16179] ? do_raw_getsockopt+0x1c0/0x1c0 [ 673.292080][T16179] ? lock_sock_nested+0xa8/0x120 [ 673.297044][T16179] ip_append_data+0x11c/0x190 [ 673.301712][T16179] ? do_raw_getsockopt+0x1c0/0x1c0 [ 673.306827][T16179] raw_sendmsg+0x1d9e/0x3790 [ 673.311455][T16179] inet_sendmsg+0x147/0x310 [ 673.315949][T16179] ? security_socket_sendmsg+0xa0/0xd0 [ 673.321487][T16179] ? inet_send_prepare+0x250/0x250 [ 673.326596][T16179] sock_write_iter+0x2a6/0x3a0 [ 673.331370][T16179] __vfs_write+0x5a1/0x740 [ 673.335794][T16179] vfs_write+0x275/0x590 [ 673.340035][T16179] ksys_write+0x117/0x220 [ 673.344362][T16179] __x64_sys_write+0x7b/0x90 [ 673.348966][T16179] do_syscall_64+0xf7/0x1c0 [ 673.353471][T16179] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.359352][T16179] RIP: 0033:0x459a59 [ 673.363243][T16179] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:08:10 executing program 4 (fault-call:0 fault-nth:67): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 673.382836][T16179] RSP: 002b:00007fe1b8b00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 673.391252][T16179] RAX: ffffffffffffffda RBX: 00007fe1b8b00c90 RCX: 0000000000459a59 [ 673.399229][T16179] RDX: 000000000000000b RSI: 00000000200001c0 RDI: 0000000000000003 [ 673.407203][T16179] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 673.415279][T16179] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1b8b016d4 [ 673.423247][T16179] R13: 00000000004c9e4b R14: 00000000004e1a48 R15: 0000000000000004 [ 673.451403][T16181] FAULT_INJECTION: forcing a failure. [ 673.451403][T16181] name failslab, interval 1, probability 0, space 0, times 0 [ 673.475455][T16173] validate_nla: 24 callbacks suppressed [ 673.475461][T16173] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 673.489398][T16173] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 673.499439][T16181] CPU: 1 PID: 16181 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 673.507341][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.517389][T16181] Call Trace: [ 673.520681][T16181] dump_stack+0x1d8/0x2f8 [ 673.525007][T16181] should_fail+0x555/0x770 [ 673.529429][T16181] __should_failslab+0x11a/0x160 [ 673.534366][T16181] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 673.540085][T16181] should_failslab+0x9/0x20 [ 673.544589][T16181] __kmalloc+0x7a/0x340 [ 673.548739][T16181] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 673.554455][T16181] tomoyo_realpath_from_path+0xdc/0x7c0 [ 673.560004][T16181] tomoyo_mount_permission+0x923/0xa30 [ 673.565510][T16181] ? kmem_cache_free+0xd8/0xf0 [ 673.570292][T16181] tomoyo_sb_mount+0x35/0x40 [ 673.574881][T16181] security_sb_mount+0x84/0xe0 [ 673.579642][T16181] do_mount+0x10a/0x2510 [ 673.583882][T16181] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 673.589418][T16181] ? copy_mount_options+0x5f/0x3c0 [ 673.594532][T16181] ? copy_mount_options+0x308/0x3c0 [ 673.599728][T16181] ksys_mount+0xcc/0x100 [ 673.603969][T16181] __x64_sys_mount+0xbf/0xd0 [ 673.608561][T16181] do_syscall_64+0xf7/0x1c0 [ 673.613070][T16181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.618950][T16181] RIP: 0033:0x45c4aa [ 673.622837][T16181] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 673.642445][T16181] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 673.650940][T16181] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 673.658902][T16181] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 673.666867][T16181] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 673.674837][T16181] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 673.682798][T16181] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 673.692168][T16181] ERROR: Out of memory at tomoyo_realpath_from_path. 03:08:10 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:08:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 673.787029][T16187] FAULT_INJECTION: forcing a failure. [ 673.787029][T16187] name failslab, interval 1, probability 0, space 0, times 0 [ 673.801818][T16189] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 673.820924][T16187] CPU: 1 PID: 16187 Comm: syz-executor.1 Not tainted 5.4.0-rc2+ #0 [ 673.822188][T16189] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 673.828845][T16187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.828882][T16187] Call Trace: [ 673.828901][T16187] dump_stack+0x1d8/0x2f8 [ 673.828919][T16187] should_fail+0x555/0x770 [ 673.859034][T16187] __should_failslab+0x11a/0x160 [ 673.863968][T16187] should_failslab+0x9/0x20 [ 673.868468][T16187] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 673.874214][T16187] ? __kmalloc_node_track_caller+0x3c/0x60 [ 673.880021][T16187] __kmalloc_node_track_caller+0x3c/0x60 [ 673.885651][T16187] ? __ip_append_data+0x2077/0x31a0 [ 673.890844][T16187] __alloc_skb+0xe8/0x500 [ 673.895176][T16187] __ip_append_data+0x2077/0x31a0 [ 673.900201][T16187] ? do_raw_getsockopt+0x1c0/0x1c0 [ 673.905314][T16187] ? lock_sock_nested+0xa8/0x120 [ 673.910254][T16187] ip_append_data+0x11c/0x190 [ 673.925006][T16187] ? do_raw_getsockopt+0x1c0/0x1c0 [ 673.930121][T16187] raw_sendmsg+0x1d9e/0x3790 [ 673.934751][T16187] inet_sendmsg+0x147/0x310 [ 673.939510][T16187] ? security_socket_sendmsg+0xa0/0xd0 [ 673.948785][T16187] ? inet_send_prepare+0x250/0x250 [ 673.957286][T16187] sock_write_iter+0x2a6/0x3a0 [ 673.962063][T16187] __vfs_write+0x5a1/0x740 [ 673.969013][T16187] vfs_write+0x275/0x590 [ 673.973780][T16187] ksys_write+0x117/0x220 [ 673.979107][T16187] __x64_sys_write+0x7b/0x90 [ 673.985961][T16187] do_syscall_64+0xf7/0x1c0 [ 673.990464][T16187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 673.996613][T16187] RIP: 0033:0x459a59 [ 674.000523][T16187] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.024030][T16187] RSP: 002b:00007fe1b8b00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:08:11 executing program 4 (fault-call:0 fault-nth:68): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 674.033657][T16187] RAX: ffffffffffffffda RBX: 00007fe1b8b00c90 RCX: 0000000000459a59 [ 674.042874][T16187] RDX: 000000000000000b RSI: 00000000200001c0 RDI: 0000000000000003 [ 674.055402][T16187] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 674.065016][T16187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1b8b016d4 [ 674.073082][T16187] R13: 00000000004c9e4b R14: 00000000004e1a48 R15: 0000000000000004 03:08:11 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x600) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x82a00000}}}}]}, 0x48}}, 0x0) 03:08:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x18000000}}}}]}, 0x48}}, 0x0) 03:08:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x803}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:11 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 674.171066][T16201] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 674.196113][T16196] FAULT_INJECTION: forcing a failure. [ 674.196113][T16196] name failslab, interval 1, probability 0, space 0, times 0 [ 674.200277][T16201] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 674.224931][T16196] CPU: 1 PID: 16196 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 674.233622][T16196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.243705][T16196] Call Trace: [ 674.247090][T16196] dump_stack+0x1d8/0x2f8 [ 674.252139][T16196] should_fail+0x555/0x770 [ 674.256928][T16196] __should_failslab+0x11a/0x160 [ 674.261870][T16196] should_failslab+0x9/0x20 [ 674.266737][T16196] kmem_cache_alloc_trace+0x5d/0x2f0 [ 674.273356][T16196] ? legacy_init_fs_context+0x51/0xc0 [ 674.280227][T16196] legacy_init_fs_context+0x51/0xc0 [ 674.285426][T16196] alloc_fs_context+0x53a/0x640 [ 674.291246][T16196] fs_context_for_mount+0x24/0x30 [ 674.296449][T16196] vfs_kern_mount+0x2c/0x160 [ 674.301062][T16196] btrfs_mount+0x34f/0x18e0 [ 674.305685][T16196] ? check_preemption_disabled+0x47/0x2a0 [ 674.313925][T16196] ? vfs_parse_fs_string+0x13b/0x1a0 [ 674.320576][T16196] ? cap_capable+0x250/0x290 [ 674.325984][T16196] ? safesetid_security_capable+0x89/0xf0 [ 674.332504][T16196] legacy_get_tree+0xf9/0x1a0 [ 674.337181][T16196] ? btrfs_resize_thread_pool+0x290/0x290 [ 674.342901][T16196] vfs_get_tree+0x8b/0x2a0 [ 674.347592][T16196] do_mount+0x16c0/0x2510 [ 674.352010][T16196] ? copy_mount_options+0x308/0x3c0 [ 674.358018][T16196] ksys_mount+0xcc/0x100 [ 674.362277][T16196] __x64_sys_mount+0xbf/0xd0 [ 674.366881][T16196] do_syscall_64+0xf7/0x1c0 [ 674.373017][T16196] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.379056][T16196] RIP: 0033:0x45c4aa [ 674.383040][T16196] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 674.403952][T16196] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 674.413434][T16196] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa 03:08:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 674.421669][T16196] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 674.429636][T16196] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 674.437602][T16196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 674.445831][T16196] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 674.456285][T16204] FAULT_INJECTION: forcing a failure. [ 674.456285][T16204] name failslab, interval 1, probability 0, space 0, times 0 [ 674.519324][T16204] CPU: 0 PID: 16204 Comm: syz-executor.1 Not tainted 5.4.0-rc2+ #0 [ 674.528416][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.540398][T16204] Call Trace: [ 674.540446][T16204] dump_stack+0x1d8/0x2f8 [ 674.540462][T16204] should_fail+0x555/0x770 [ 674.540480][T16204] __should_failslab+0x11a/0x160 [ 674.540496][T16204] ? __nf_conntrack_alloc+0xbf/0x3d0 [ 674.554958][T16204] should_failslab+0x9/0x20 [ 674.554971][T16204] kmem_cache_alloc+0x56/0x2e0 [ 674.554987][T16204] __nf_conntrack_alloc+0xbf/0x3d0 [ 674.574388][T16204] init_conntrack+0x3ae/0x1420 [ 674.574411][T16204] nf_conntrack_in+0x62e/0x11ad [ 674.585568][T16204] ipv4_conntrack_local+0x123/0x1d0 [ 674.585578][T16204] ? ipv4_conntrack_in+0x30/0x30 [ 674.585587][T16204] nf_hook_slow+0xc8/0x210 [ 674.585602][T16204] nf_hook+0x23a/0x310 [ 674.585610][T16204] ? nf_hook+0x310/0x310 [ 674.585621][T16204] ? nf_hook+0x310/0x310 [ 674.585633][T16204] __ip_local_out+0x3c7/0x520 [ 674.585646][T16204] ip_send_skb+0x4e/0x1e0 [ 674.585659][T16204] ip_push_pending_frames+0x66/0x80 [ 674.585670][T16204] raw_sendmsg+0x1e06/0x3790 [ 674.585713][T16204] inet_sendmsg+0x147/0x310 [ 674.613063][T16204] ? security_socket_sendmsg+0xa0/0xd0 [ 674.613074][T16204] ? inet_send_prepare+0x250/0x250 [ 674.613087][T16204] sock_write_iter+0x2a6/0x3a0 [ 674.613109][T16204] __vfs_write+0x5a1/0x740 [ 674.613132][T16204] vfs_write+0x275/0x590 [ 674.613149][T16204] ksys_write+0x117/0x220 [ 674.613163][T16204] __x64_sys_write+0x7b/0x90 [ 674.613177][T16204] do_syscall_64+0xf7/0x1c0 [ 674.613190][T16204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 674.613201][T16204] RIP: 0033:0x459a59 03:08:11 executing program 1 (fault-call:3 fault-nth:4): r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 674.636360][T16204] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 674.636367][T16204] RSP: 002b:00007fe1b8b00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.636377][T16204] RAX: ffffffffffffffda RBX: 00007fe1b8b00c90 RCX: 0000000000459a59 [ 674.636383][T16204] RDX: 000000000000000b RSI: 00000000200001c0 RDI: 0000000000000003 [ 674.636391][T16204] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 674.653172][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1b8b016d4 [ 674.653179][T16204] R13: 00000000004c9e4b R14: 00000000004e1a48 R15: 0000000000000004 03:08:11 executing program 4 (fault-call:0 fault-nth:69): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 674.811590][T16211] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 674.842937][T16213] FAULT_INJECTION: forcing a failure. [ 674.842937][T16213] name failslab, interval 1, probability 0, space 0, times 0 03:08:11 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x3f000000}}}}]}, 0x48}}, 0x0) [ 674.860948][T16211] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 674.905019][T16216] FAULT_INJECTION: forcing a failure. [ 674.905019][T16216] name failslab, interval 1, probability 0, space 0, times 0 [ 674.908540][T16213] CPU: 1 PID: 16213 Comm: syz-executor.1 Not tainted 5.4.0-rc2+ #0 [ 674.925529][T16213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.935586][T16213] Call Trace: [ 674.938879][T16213] dump_stack+0x1d8/0x2f8 [ 674.943219][T16213] should_fail+0x555/0x770 [ 674.947642][T16213] __should_failslab+0x11a/0x160 [ 674.947656][T16213] ? nf_ct_ext_add+0x35a/0x530 [ 674.947666][T16213] should_failslab+0x9/0x20 [ 674.947679][T16213] __kmalloc_track_caller+0x79/0x340 [ 674.961830][T16213] __krealloc+0x89/0xb0 [ 674.961845][T16213] nf_ct_ext_add+0x35a/0x530 [ 674.961860][T16213] init_conntrack+0x6ce/0x1420 [ 674.980588][T16213] nf_conntrack_in+0x62e/0x11ad [ 674.985456][T16213] ipv4_conntrack_local+0x123/0x1d0 [ 674.990826][T16213] ? ipv4_conntrack_in+0x30/0x30 [ 674.995759][T16213] nf_hook_slow+0xc8/0x210 [ 675.000170][T16213] nf_hook+0x23a/0x310 [ 675.004234][T16213] ? nf_hook+0x310/0x310 [ 675.008484][T16213] ? nf_hook+0x310/0x310 [ 675.012721][T16213] __ip_local_out+0x3c7/0x520 [ 675.017397][T16213] ip_send_skb+0x4e/0x1e0 [ 675.021729][T16213] ip_push_pending_frames+0x66/0x80 [ 675.026916][T16213] raw_sendmsg+0x1e06/0x3790 [ 675.031529][T16213] inet_sendmsg+0x147/0x310 [ 675.036019][T16213] ? security_socket_sendmsg+0xa0/0xd0 [ 675.041462][T16213] ? inet_send_prepare+0x250/0x250 [ 675.046568][T16213] sock_write_iter+0x2a6/0x3a0 [ 675.051415][T16213] __vfs_write+0x5a1/0x740 [ 675.055832][T16213] vfs_write+0x275/0x590 [ 675.060065][T16213] ksys_write+0x117/0x220 [ 675.064382][T16213] __x64_sys_write+0x7b/0x90 [ 675.068959][T16213] do_syscall_64+0xf7/0x1c0 [ 675.073451][T16213] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.079338][T16213] RIP: 0033:0x459a59 [ 675.083225][T16213] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 675.102922][T16213] RSP: 002b:00007fe1b8b00c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.111331][T16213] RAX: ffffffffffffffda RBX: 00007fe1b8b00c90 RCX: 0000000000459a59 [ 675.119291][T16213] RDX: 000000000000000b RSI: 00000000200001c0 RDI: 0000000000000003 [ 675.127255][T16213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 675.135740][T16213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1b8b016d4 [ 675.143703][T16213] R13: 00000000004c9e4b R14: 00000000004e1a48 R15: 0000000000000004 [ 675.151678][T16216] CPU: 0 PID: 16216 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 675.151956][ C1] net_ratelimit: 16 callbacks suppressed [ 675.151962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 675.159578][T16216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.159585][T16216] Call Trace: [ 675.165291][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 675.171031][T16216] dump_stack+0x1d8/0x2f8 [ 675.191917][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 675.194358][T16216] should_fail+0x555/0x770 [ 675.200090][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 675.204489][T16216] __should_failslab+0x11a/0x160 [ 675.204500][T16216] ? tomoyo_encode2+0x273/0x5a0 [ 675.204510][T16216] should_failslab+0x9/0x20 [ 675.204520][T16216] __kmalloc+0x7a/0x340 [ 675.204532][T16216] tomoyo_encode2+0x273/0x5a0 [ 675.204546][T16216] tomoyo_realpath_from_path+0x769/0x7c0 [ 675.204565][T16216] tomoyo_mount_permission+0x923/0xa30 [ 675.210325][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 675.215176][T16216] ? kmem_cache_free+0xd8/0xf0 03:08:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x88470000}}}}]}, 0x48}}, 0x0) 03:08:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x900) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 675.215204][T16216] tomoyo_sb_mount+0x35/0x40 [ 675.220051][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 675.224510][T16216] security_sb_mount+0x84/0xe0 [ 675.224524][T16216] do_mount+0x10a/0x2510 [ 675.224534][T16216] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 675.224545][T16216] ? copy_mount_options+0x5f/0x3c0 [ 675.238996][T16216] ? copy_mount_options+0x308/0x3c0 [ 675.239008][T16216] ksys_mount+0xcc/0x100 [ 675.239021][T16216] __x64_sys_mount+0xbf/0xd0 [ 675.259516][T16216] do_syscall_64+0xf7/0x1c0 03:08:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 675.259531][T16216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.259545][T16216] RIP: 0033:0x45c4aa [ 675.279835][T16216] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 675.279842][T16216] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 675.279854][T16216] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa 03:08:12 executing program 1 (fault-call:3 fault-nth:5): r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:08:12 executing program 4 (fault-call:0 fault-nth:70): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 675.290149][T16216] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 675.290156][T16216] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 675.290161][T16216] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 675.290167][T16216] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 675.307734][T16216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 675.469625][T16232] FAULT_INJECTION: forcing a failure. [ 675.469625][T16232] name failslab, interval 1, probability 0, space 0, times 0 [ 675.488294][T16226] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 675.505235][T16226] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 675.513577][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 675.513627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 675.518562][T16232] CPU: 1 PID: 16232 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 675.533028][T16232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.543078][T16232] Call Trace: [ 675.546375][T16232] dump_stack+0x1d8/0x2f8 [ 675.550715][T16232] should_fail+0x555/0x770 [ 675.555134][T16232] __should_failslab+0x11a/0x160 [ 675.560090][T16232] should_failslab+0x9/0x20 [ 675.564590][T16232] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 675.570307][T16232] ? __kmalloc_node+0x3c/0x60 [ 675.574987][T16232] ? smack_sb_eat_lsm_opts+0x867/0xa20 [ 675.580533][T16232] __kmalloc_node+0x3c/0x60 [ 675.585036][T16232] kvmalloc_node+0xcc/0x130 [ 675.589533][T16232] btrfs_mount_root+0xe3/0x1040 [ 675.594381][T16232] ? vfs_parse_fs_string+0x13b/0x1a0 [ 675.599657][T16232] ? rcu_read_lock_sched_held+0x10b/0x170 [ 675.605371][T16232] ? trace_kfree+0xb2/0x110 [ 675.609875][T16232] legacy_get_tree+0xf9/0x1a0 [ 675.614543][T16232] ? btrfs_control_open+0x40/0x40 [ 675.619561][T16232] vfs_get_tree+0x8b/0x2a0 [ 675.623974][T16232] vfs_kern_mount+0xc2/0x160 [ 675.628555][T16232] btrfs_mount+0x34f/0x18e0 [ 675.633065][T16232] ? check_preemption_disabled+0x47/0x2a0 [ 675.638780][T16232] ? vfs_parse_fs_string+0x13b/0x1a0 [ 675.644080][T16232] ? cap_capable+0x250/0x290 [ 675.648665][T16232] ? safesetid_security_capable+0x89/0xf0 [ 675.654378][T16232] legacy_get_tree+0xf9/0x1a0 [ 675.659188][T16232] ? btrfs_resize_thread_pool+0x290/0x290 [ 675.664906][T16232] vfs_get_tree+0x8b/0x2a0 [ 675.669318][T16232] do_mount+0x16c0/0x2510 [ 675.673648][T16232] ? copy_mount_options+0x308/0x3c0 [ 675.678841][T16232] ksys_mount+0xcc/0x100 [ 675.683105][T16232] __x64_sys_mount+0xbf/0xd0 [ 675.687694][T16232] do_syscall_64+0xf7/0x1c0 [ 675.692195][T16232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 675.698085][T16232] RIP: 0033:0x45c4aa [ 675.701984][T16232] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 675.721663][T16232] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 675.730068][T16232] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 675.738031][T16232] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 675.745997][T16232] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 675.753963][T16232] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 675.761927][T16232] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x88480000}}}}]}, 0x48}}, 0x0) 03:08:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 675.770149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 675.775953][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x40000000}}}}]}, 0x48}}, 0x0) 03:08:12 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xa00) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#!\xf9', './file0'}, 0xb) 03:08:12 executing program 4 (fault-call:0 fault-nth:71): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 675.987095][T16255] FAULT_INJECTION: forcing a failure. [ 675.987095][T16255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 676.000411][T16255] CPU: 1 PID: 16255 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 676.000418][T16255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.000423][T16255] Call Trace: [ 676.000439][T16255] dump_stack+0x1d8/0x2f8 [ 676.000454][T16255] should_fail+0x555/0x770 [ 676.000470][T16255] should_fail_alloc_page+0x55/0x60 [ 676.000482][T16255] prepare_alloc_pages+0x283/0x460 [ 676.018511][T16255] __alloc_pages_nodemask+0xb2/0x5d0 [ 676.018534][T16255] kmem_getpages+0x4d/0xa00 [ 676.018548][T16255] cache_grow_begin+0x7e/0x2c0 [ 676.018563][T16255] cache_alloc_refill+0x311/0x3f0 [ 676.018576][T16255] ? check_preemption_disabled+0xb7/0x2a0 [ 676.018592][T16255] kmem_cache_alloc_trace+0x2d0/0x2f0 [ 676.018601][T16255] ? btrfs_mount_root+0x1b2/0x1040 [ 676.018613][T16255] btrfs_mount_root+0x1b2/0x1040 [ 676.018627][T16255] ? vfs_parse_fs_string+0x13b/0x1a0 [ 676.026210][T16255] ? rcu_read_lock_sched_held+0x10b/0x170 [ 676.026224][T16255] ? trace_kfree+0xb2/0x110 [ 676.026239][T16255] legacy_get_tree+0xf9/0x1a0 [ 676.026249][T16255] ? btrfs_control_open+0x40/0x40 [ 676.026261][T16255] vfs_get_tree+0x8b/0x2a0 [ 676.026275][T16255] vfs_kern_mount+0xc2/0x160 [ 676.035850][T16255] btrfs_mount+0x34f/0x18e0 [ 676.035871][T16255] ? check_preemption_disabled+0x47/0x2a0 [ 676.035888][T16255] ? vfs_parse_fs_string+0x13b/0x1a0 [ 676.035899][T16255] ? cap_capable+0x250/0x290 [ 676.035913][T16255] ? safesetid_security_capable+0x89/0xf0 [ 676.035928][T16255] legacy_get_tree+0xf9/0x1a0 [ 676.035935][T16255] ? btrfs_resize_thread_pool+0x290/0x290 [ 676.035947][T16255] vfs_get_tree+0x8b/0x2a0 [ 676.046305][T16255] do_mount+0x16c0/0x2510 [ 676.046323][T16255] ? copy_mount_options+0x308/0x3c0 [ 676.046336][T16255] ksys_mount+0xcc/0x100 [ 676.046348][T16255] __x64_sys_mount+0xbf/0xd0 [ 676.046365][T16255] do_syscall_64+0xf7/0x1c0 [ 676.046380][T16255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.046388][T16255] RIP: 0033:0x45c4aa [ 676.046399][T16255] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 676.055611][T16255] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 676.055621][T16255] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 676.055626][T16255] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#!\xf9', './file0'}, 0xb) 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#!\xf9', './file0'}, 0xb) 03:08:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 676.055631][T16255] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 676.055637][T16255] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 676.055643][T16255] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x451210b2}}}}]}, 0x48}}, 0x0) 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#!\xf9', './file0'}, 0xb) 03:08:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x88a8ffff}}}}]}, 0x48}}, 0x0) 03:08:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xb00) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:13 executing program 4 (fault-call:0 fault-nth:72): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 676.448288][T16279] FAULT_INJECTION: forcing a failure. [ 676.448288][T16279] name failslab, interval 1, probability 0, space 0, times 0 [ 676.470392][T16279] CPU: 1 PID: 16279 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 676.478315][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.488461][T16279] Call Trace: [ 676.488479][T16279] dump_stack+0x1d8/0x2f8 [ 676.488493][T16279] should_fail+0x555/0x770 [ 676.488509][T16279] __should_failslab+0x11a/0x160 [ 676.488522][T16279] should_failslab+0x9/0x20 [ 676.488532][T16279] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 676.488540][T16279] ? __kmalloc_node+0x3c/0x60 [ 676.488553][T16279] ? smack_sb_eat_lsm_opts+0x867/0xa20 [ 676.509943][T16279] __kmalloc_node+0x3c/0x60 [ 676.509958][T16279] kvmalloc_node+0xcc/0x130 [ 676.509970][T16279] btrfs_mount_root+0xe3/0x1040 [ 676.509985][T16279] ? vfs_parse_fs_string+0x13b/0x1a0 [ 676.539588][T16279] ? rcu_read_lock_sched_held+0x10b/0x170 [ 676.539602][T16279] ? trace_kfree+0xb2/0x110 [ 676.539617][T16279] legacy_get_tree+0xf9/0x1a0 [ 676.539629][T16279] ? btrfs_control_open+0x40/0x40 [ 676.564842][T16279] vfs_get_tree+0x8b/0x2a0 [ 676.569244][T16279] vfs_kern_mount+0xc2/0x160 [ 676.569257][T16279] btrfs_mount+0x34f/0x18e0 [ 676.569276][T16279] ? check_preemption_disabled+0x47/0x2a0 [ 676.569291][T16279] ? vfs_parse_fs_string+0x13b/0x1a0 [ 676.589301][T16279] ? cap_capable+0x250/0x290 [ 676.593888][T16279] ? safesetid_security_capable+0x89/0xf0 [ 676.593905][T16279] legacy_get_tree+0xf9/0x1a0 [ 676.593915][T16279] ? btrfs_resize_thread_pool+0x290/0x290 [ 676.593927][T16279] vfs_get_tree+0x8b/0x2a0 [ 676.593939][T16279] do_mount+0x16c0/0x2510 [ 676.593956][T16279] ? copy_mount_options+0x308/0x3c0 [ 676.610007][T16279] ksys_mount+0xcc/0x100 [ 676.610022][T16279] __x64_sys_mount+0xbf/0xd0 [ 676.610038][T16279] do_syscall_64+0xf7/0x1c0 [ 676.610054][T16279] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 676.628152][T16279] RIP: 0033:0x45c4aa 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0x3) [ 676.628164][T16279] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 676.628170][T16279] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 676.628180][T16279] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 676.628186][T16279] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 676.628191][T16279] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 676.628199][T16279] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 676.647025][T16279] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0x4) 03:08:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfbb}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0x14) 03:08:13 executing program 4 (fault-call:0 fault-nth:73): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x60000000}}}}]}, 0x48}}, 0x0) 03:08:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0x9effffff}}}}]}, 0x48}}, 0x0) 03:08:13 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xc00) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 676.939272][T16301] FAULT_INJECTION: forcing a failure. [ 676.939272][T16301] name failslab, interval 1, probability 0, space 0, times 0 [ 676.974274][T16301] CPU: 1 PID: 16301 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 676.982191][T16301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.992236][T16301] Call Trace: [ 676.992255][T16301] dump_stack+0x1d8/0x2f8 [ 676.992270][T16301] should_fail+0x555/0x770 [ 676.992289][T16301] __should_failslab+0x11a/0x160 [ 676.992300][T16301] ? vfs_parse_fs_string+0xed/0x1a0 [ 676.992314][T16301] should_failslab+0x9/0x20 [ 676.999897][T16301] __kmalloc_track_caller+0x79/0x340 [ 677.014385][T16301] kmemdup_nul+0x2a/0xa0 [ 677.014398][T16301] vfs_parse_fs_string+0xed/0x1a0 [ 677.014415][T16301] do_mount+0x11b8/0x2510 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0x5c8) 03:08:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xffeb) [ 677.014430][T16301] ? copy_mount_options+0x308/0x3c0 [ 677.024169][T16301] ksys_mount+0xcc/0x100 [ 677.024183][T16301] __x64_sys_mount+0xbf/0xd0 [ 677.024198][T16301] do_syscall_64+0xf7/0x1c0 [ 677.024213][T16301] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.033425][T16301] RIP: 0033:0x45c4aa [ 677.033436][T16301] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 677.033442][T16301] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 677.033450][T16301] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 677.033459][T16301] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 677.042924][T16301] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 677.042931][T16301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 677.042937][T16301] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:14 executing program 4 (fault-call:0 fault-nth:74): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0x200001cb) [ 677.267332][T16321] FAULT_INJECTION: forcing a failure. [ 677.267332][T16321] name failslab, interval 1, probability 0, space 0, times 0 [ 677.285629][T16321] CPU: 1 PID: 16321 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 677.293544][T16321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.303604][T16321] Call Trace: [ 677.306902][T16321] dump_stack+0x1d8/0x2f8 [ 677.311240][T16321] should_fail+0x555/0x770 [ 677.315663][T16321] __should_failslab+0x11a/0x160 [ 677.320606][T16321] should_failslab+0x9/0x20 [ 677.325108][T16321] kmem_cache_alloc_trace+0x5d/0x2f0 [ 677.330391][T16321] ? legacy_init_fs_context+0x51/0xc0 [ 677.335759][T16321] legacy_init_fs_context+0x51/0xc0 [ 677.341037][T16321] alloc_fs_context+0x53a/0x640 [ 677.341054][T16321] fs_context_for_mount+0x24/0x30 [ 677.341064][T16321] do_mount+0x10a7/0x2510 [ 677.341079][T16321] ? copy_mount_options+0x308/0x3c0 [ 677.341092][T16321] ksys_mount+0xcc/0x100 03:08:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x65580000}}}}]}, 0x48}}, 0x0) 03:08:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0x7ffff000) [ 677.350933][T16321] __x64_sys_mount+0xbf/0xd0 [ 677.350950][T16321] do_syscall_64+0xf7/0x1c0 [ 677.350966][T16321] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.350978][T16321] RIP: 0033:0x45c4aa [ 677.360460][T16321] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 677.360466][T16321] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 03:08:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0xf00) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 677.360476][T16321] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 677.360489][T16321] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 677.360499][T16321] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 677.369275][T16321] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 677.369281][T16321] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xafdf516a}}}}]}, 0x48}}, 0x0) 03:08:14 executing program 4 (fault-call:0 fault-nth:75): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#!A./fil\ahV'], 0xb) 03:08:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x81000000}}}}]}, 0x48}}, 0x0) 03:08:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 677.588471][T16342] FAULT_INJECTION: forcing a failure. [ 677.588471][T16342] name failslab, interval 1, probability 0, space 0, times 0 [ 677.647629][T16342] CPU: 1 PID: 16342 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 677.655559][T16342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.665611][T16342] Call Trace: [ 677.665646][T16342] dump_stack+0x1d8/0x2f8 [ 677.665660][T16342] should_fail+0x555/0x770 [ 677.665679][T16342] __should_failslab+0x11a/0x160 [ 677.665694][T16342] ? mempool_alloc_slab+0x4d/0x70 [ 677.687620][T16342] should_failslab+0x9/0x20 [ 677.692122][T16342] kmem_cache_alloc+0x56/0x2e0 [ 677.692138][T16342] mempool_alloc_slab+0x4d/0x70 [ 677.692146][T16342] ? mempool_free+0x350/0x350 [ 677.692154][T16342] mempool_alloc+0x104/0x5e0 [ 677.692177][T16342] bio_alloc_bioset+0x1b0/0x5f0 [ 677.692195][T16342] submit_bh_wbc+0x1d5/0x700 [ 677.701771][T16342] block_read_full_page+0x9de/0xbd0 [ 677.701790][T16342] ? blkdev_direct_IO+0xd0/0xd0 [ 677.701799][T16342] ? lru_cache_add+0x2db/0x3b0 [ 677.701816][T16342] ? add_to_page_cache_lru+0x2d4/0x4a0 [ 677.711041][T16342] blkdev_readpage+0x1c/0x20 03:08:14 executing program 1: times(&(0x7f0000000240)) r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x40020a) write$cgroup_int(r3, &(0x7f0000000080), 0x12) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x5c0, 0xc}, &(0x7f0000000200)=0x8) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)={0x3f00}) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="232120c5a1fb5b9e2400590972fd192f6619e7ff2a4f"], 0xb) 03:08:14 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x1100) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 677.711052][T16342] do_read_cache_page+0x798/0xcb0 [ 677.711067][T16342] read_cache_page_gfp+0x29/0x30 [ 677.720482][T16342] btrfs_scan_one_device+0x16a/0x450 [ 677.720496][T16342] ? trace_hardirqs_on+0x74/0x80 [ 677.720510][T16342] btrfs_mount_root+0x4af/0x1040 [ 677.730521][T16342] ? trace_kfree+0xb2/0x110 [ 677.730535][T16342] legacy_get_tree+0xf9/0x1a0 [ 677.730543][T16342] ? btrfs_control_open+0x40/0x40 [ 677.730555][T16342] vfs_get_tree+0x8b/0x2a0 [ 677.740751][T16342] vfs_kern_mount+0xc2/0x160 [ 677.740763][T16342] btrfs_mount+0x34f/0x18e0 [ 677.740780][T16342] ? check_preemption_disabled+0x47/0x2a0 [ 677.740796][T16342] ? vfs_parse_fs_string+0x13b/0x1a0 [ 677.750346][T16342] ? cap_capable+0x250/0x290 [ 677.750362][T16342] ? safesetid_security_capable+0x89/0xf0 [ 677.750376][T16342] legacy_get_tree+0xf9/0x1a0 [ 677.750387][T16342] ? btrfs_resize_thread_pool+0x290/0x290 [ 677.760826][T16342] vfs_get_tree+0x8b/0x2a0 [ 677.760839][T16342] do_mount+0x16c0/0x2510 [ 677.760856][T16342] ? copy_mount_options+0x308/0x3c0 [ 677.760868][T16342] ksys_mount+0xcc/0x100 03:08:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}]}, 0xfffffffffffffd2d) [ 677.760879][T16342] __x64_sys_mount+0xbf/0xd0 [ 677.770720][T16342] do_syscall_64+0xf7/0x1c0 [ 677.770736][T16342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 677.770746][T16342] RIP: 0033:0x45c4aa [ 677.770755][T16342] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 677.770764][T16342] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 677.779886][T16342] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 677.779893][T16342] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 677.779899][T16342] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 677.779905][T16342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 677.779911][T16342] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) syz_open_dev$sndmidi(&(0x7f0000000040)='/eev/s\x85d/}\x92\x05#k\x84\xae\xe2\xca', 0x40010001, 0x400) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:08:14 executing program 4 (fault-call:0 fault-nth:76): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 678.073580][T16370] FAULT_INJECTION: forcing a failure. [ 678.073580][T16370] name failslab, interval 1, probability 0, space 0, times 0 [ 678.113286][T16370] CPU: 1 PID: 16370 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 678.121244][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.131298][T16370] Call Trace: [ 678.134597][T16370] dump_stack+0x1d8/0x2f8 [ 678.138928][T16370] should_fail+0x555/0x770 [ 678.143349][T16370] __should_failslab+0x11a/0x160 [ 678.148293][T16370] should_failslab+0x9/0x20 [ 678.152806][T16370] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 678.158522][T16370] ? __kmalloc_node+0x3c/0x60 [ 678.163196][T16370] ? smack_sb_eat_lsm_opts+0x867/0xa20 [ 678.168648][T16370] __kmalloc_node+0x3c/0x60 [ 678.168664][T16370] kvmalloc_node+0xcc/0x130 [ 678.168677][T16370] btrfs_mount_root+0xe3/0x1040 [ 678.168692][T16370] ? vfs_parse_fs_string+0x13b/0x1a0 [ 678.177668][T16370] ? rcu_read_lock_sched_held+0x10b/0x170 [ 678.177681][T16370] ? trace_kfree+0xb2/0x110 [ 678.177695][T16370] legacy_get_tree+0xf9/0x1a0 [ 678.177704][T16370] ? btrfs_control_open+0x40/0x40 [ 678.177716][T16370] vfs_get_tree+0x8b/0x2a0 [ 678.187825][T16370] vfs_kern_mount+0xc2/0x160 [ 678.187837][T16370] btrfs_mount+0x34f/0x18e0 03:08:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65300a0195157ba86d2718af443f183e8ce87746b0e76122f426ba009505d25846115fdb3ad23a135f7ae5e502a68ccdb6295e7b7cbf0d0918d1f276699552d13ed8501df15259d86b66e9a9b7ae6cba98e82ccb7444bf8b965f76775cd7947e9856ea7d281dc00b58b2fdc3f8e243a258e221a16ed8c0b99129cbc17884a5de29"], 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x40020a) write$cgroup_int(r1, &(0x7f0000000080), 0x12) sendto$inet(r1, &(0x7f0000000180)="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", 0xfe, 0x40000, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x101}, 0x10) [ 678.187863][T16370] ? check_preemption_disabled+0x47/0x2a0 [ 678.187881][T16370] ? vfs_parse_fs_string+0x13b/0x1a0 [ 678.198072][T16370] ? cap_capable+0x250/0x290 [ 678.198087][T16370] ? safesetid_security_capable+0x89/0xf0 [ 678.198102][T16370] legacy_get_tree+0xf9/0x1a0 [ 678.198115][T16370] ? btrfs_resize_thread_pool+0x290/0x290 [ 678.207792][T16370] vfs_get_tree+0x8b/0x2a0 [ 678.207806][T16370] do_mount+0x16c0/0x2510 [ 678.207823][T16370] ? copy_mount_options+0x308/0x3c0 [ 678.207838][T16370] ksys_mount+0xcc/0x100 [ 678.216915][T16370] __x64_sys_mount+0xbf/0xd0 [ 678.216932][T16370] do_syscall_64+0xf7/0x1c0 [ 678.216947][T16370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.216960][T16370] RIP: 0033:0x45c4aa [ 678.227417][T16370] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 678.227423][T16370] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 03:08:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xefffffff}}}}]}, 0x48}}, 0x0) 03:08:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x828d0000}}}}]}, 0x48}}, 0x0) 03:08:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40000, 0x0) accept4$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x1c0c00) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x28120, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_type(r2, 0x0, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000100)) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 678.227432][T16370] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 678.227438][T16370] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 678.227445][T16370] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 678.227450][T16370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 678.227456][T16370] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7d37dad9, 0x1) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\xe3\x00', {0x9, 0x4ba, 0x6, 0x5}, 0x20, [0x3, 0x20, 0x0, 0x5, 0x7ff, 0x1c00000, 0x7, 0x58, 0x7, 0x7, 0x0, 0xffff, 0x1, 0x7, 0x3, 0xffffffff, 0x65c155d9, 0x3f, 0x38, 0x1, 0x2, 0x0, 0x0, 0xffff, 0x8, 0x8, 0x3, 0x5, 0x3316, 0x9, 0x3, 0x4, 0x5, 0x5, 0x3, 0xcbb, 0x1f, 0xb5, 0x2511, 0x7, 0x6, 0x78, 0x5, 0x457e, 0x3f, 0x9, 0x3, 0x2, 0x3ff, 0x7ff, 0x3, 0x5d, 0x691304b8, 0x2, 0x2, 0x5, 0x9, 0xcd, 0x80000001, 0x6, 0x0, 0x0, 0x331, 0x3f], [0x5, 0x80, 0xf, 0x8, 0x36, 0x7, 0x1, 0x3, 0x6, 0x0, 0x9, 0xffff8000, 0x9, 0xffffffff, 0x400, 0x73, 0x2093, 0x240, 0x0, 0x0, 0x80, 0x8001, 0x4, 0xffff8001, 0xa6, 0x9, 0x1, 0x10000, 0x8000, 0x0, 0xff, 0x1, 0x8, 0x0, 0xed01, 0x3, 0x1, 0xffffffff, 0x3e, 0x41e, 0x1f, 0x8001, 0x4, 0x1, 0x20, 0x8, 0x7, 0x3, 0x1ff, 0x800, 0x4, 0x7f, 0xffff, 0x6, 0x3f, 0x4, 0x1ff, 0x1, 0xfff, 0x575b, 0x8001, 0x12ab9758, 0x1ff], [0x2ddcb4f2, 0x1, 0x100, 0x2, 0x147, 0x9190, 0x9, 0x5, 0x1, 0x8, 0x8, 0x1f, 0x0, 0x0, 0x4, 0x4, 0x200, 0x5, 0x7, 0x2385de24, 0x44e7bf2b, 0x80000001, 0x7ff, 0x3ff, 0x7, 0x3, 0x5, 0x7ff, 0x0, 0x5, 0x2, 0x3, 0x800, 0x3, 0x8, 0x908c, 0x4, 0x4, 0xe832, 0x2, 0x1, 0x8, 0x159f, 0x1de0, 0x6, 0x400, 0x120, 0x3, 0x40, 0x7, 0x2, 0x0, 0x7, 0x3, 0x98, 0x85, 0x7, 0x5, 0x2, 0x7, 0x8, 0xfffffff7, 0x1, 0x8], [0x0, 0x1, 0x7c, 0x7, 0xffff, 0x1, 0xfb7, 0x3, 0x3, 0x4, 0xfffffff8, 0x2, 0x7, 0x7572e1e1, 0x0, 0x1, 0x4, 0x80000001, 0x447efe4c, 0x6, 0x100, 0x4, 0x0, 0x10000, 0x9, 0x100, 0x100, 0x40, 0x7, 0x9, 0x9, 0x0, 0x2, 0x8008, 0x9, 0x14cd, 0x101, 0x38dc, 0x7fffffff, 0x7fff, 0x401, 0x1ff, 0x81, 0xafea, 0xfffffffe, 0x5, 0x2, 0x251b, 0x8, 0x3, 0x0, 0x2, 0xb1, 0xbbd, 0x800, 0x8, 0x8, 0x10000, 0x6, 0xffffff81, 0x2, 0x7, 0xb3, 0x1]}, 0x45c) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321432e2f6669dc3b73bf1ce4a56c65300a"], 0xb) 03:08:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x1200) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:15 executing program 4 (fault-call:0 fault-nth:77): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) [ 678.579401][T16390] validate_nla: 22 callbacks suppressed [ 678.579408][T16390] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 678.600443][T16397] FAULT_INJECTION: forcing a failure. [ 678.600443][T16397] name failslab, interval 1, probability 0, space 0, times 0 [ 678.617061][T16390] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 678.619179][T16397] CPU: 0 PID: 16397 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 678.633041][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.633046][T16397] Call Trace: [ 678.633065][T16397] dump_stack+0x1d8/0x2f8 [ 678.633080][T16397] should_fail+0x555/0x770 [ 678.633098][T16397] __should_failslab+0x11a/0x160 [ 678.633110][T16397] ? vfs_parse_fs_string+0xed/0x1a0 [ 678.633120][T16397] should_failslab+0x9/0x20 [ 678.633130][T16397] __kmalloc_track_caller+0x79/0x340 [ 678.633144][T16397] kmemdup_nul+0x2a/0xa0 [ 678.633154][T16397] vfs_parse_fs_string+0xed/0x1a0 [ 678.633169][T16397] vfs_kern_mount+0x77/0x160 [ 678.650805][T16397] btrfs_mount+0x34f/0x18e0 [ 678.650827][T16397] ? check_preemption_disabled+0x47/0x2a0 [ 678.650845][T16397] ? vfs_parse_fs_string+0x13b/0x1a0 [ 678.650855][T16397] ? cap_capable+0x250/0x290 [ 678.650869][T16397] ? safesetid_security_capable+0x89/0xf0 [ 678.650883][T16397] legacy_get_tree+0xf9/0x1a0 [ 678.650896][T16397] ? btrfs_resize_thread_pool+0x290/0x290 [ 678.684368][T16397] vfs_get_tree+0x8b/0x2a0 [ 678.684382][T16397] do_mount+0x16c0/0x2510 [ 678.684399][T16397] ? copy_mount_options+0x308/0x3c0 [ 678.684412][T16397] ksys_mount+0xcc/0x100 [ 678.684424][T16397] __x64_sys_mount+0xbf/0xd0 [ 678.684438][T16397] do_syscall_64+0xf7/0x1c0 [ 678.693493][T16397] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 678.693503][T16397] RIP: 0033:0x45c4aa [ 678.693513][T16397] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 678.693518][T16397] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 678.693528][T16397] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 678.693534][T16397] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 678.693540][T16397] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 678.693546][T16397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 03:08:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1c500, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x3, 0x20, 0x40, 0x7}, 0x6) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="230014696c65300a00c2e10000a6e7422c8320f7abbc87a6cee9bc00473314bdd532640abe44799c68bf6ee074dd72f798eb525be2a8e03bb7ef88a1ac9d96dff45cc7623e63a18a6eefe35675eedbd8ffeeefaf91bddb098bdebdcd9f70c6bf5c62ec1153933cf16e60444d42e0dc56b86d17be8e95a4930d9d5717dab00c1b63900432573c34b02c0f7d086aacc0c4497e7192f9f61a80ba8f4fbcc4fca9cb36536293395c419c6c009a8dedfb54336930f600"/194], 0xb) [ 678.693552][T16397] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xf0ffffff}}}}]}, 0x48}}, 0x0) 03:08:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x88470000}}}}]}, 0x48}}, 0x0) 03:08:15 executing program 4 (fault-call:0 fault-nth:78): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 678.878997][T16406] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 678.900721][T16406] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:15 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r3}]]}}}]}, 0x38}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@dev={0xfe, 0x80, [], 0xe}, r3}, 0x14) r4 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 678.987400][T16418] FAULT_INJECTION: forcing a failure. [ 678.987400][T16418] name failslab, interval 1, probability 0, space 0, times 0 [ 679.048012][T16418] CPU: 1 PID: 16418 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 679.055970][T16418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.066042][T16418] Call Trace: [ 679.066062][T16418] dump_stack+0x1d8/0x2f8 [ 679.066078][T16418] should_fail+0x555/0x770 [ 679.078085][T16418] __should_failslab+0x11a/0x160 [ 679.083024][T16418] should_failslab+0x9/0x20 [ 679.087522][T16418] kmem_cache_alloc_trace+0x5d/0x2f0 [ 679.092799][T16418] ? legacy_init_fs_context+0x51/0xc0 [ 679.098165][T16418] legacy_init_fs_context+0x51/0xc0 [ 679.103347][T16418] alloc_fs_context+0x53a/0x640 [ 679.103362][T16418] fs_context_for_mount+0x24/0x30 [ 679.103372][T16418] vfs_kern_mount+0x2c/0x160 [ 679.103383][T16418] btrfs_mount+0x34f/0x18e0 [ 679.103399][T16418] ? check_preemption_disabled+0x47/0x2a0 [ 679.103416][T16418] ? vfs_parse_fs_string+0x13b/0x1a0 [ 679.122405][T16418] ? cap_capable+0x250/0x290 [ 679.122420][T16418] ? safesetid_security_capable+0x89/0xf0 [ 679.122434][T16418] legacy_get_tree+0xf9/0x1a0 [ 679.122444][T16418] ? btrfs_resize_thread_pool+0x290/0x290 [ 679.122459][T16418] vfs_get_tree+0x8b/0x2a0 [ 679.143791][T16418] do_mount+0x16c0/0x2510 [ 679.154161][T16418] ? copy_mount_options+0x278/0x3c0 [ 679.154169][T16418] ? copy_mount_options+0x25e/0x3c0 [ 679.154181][T16418] ? __sanitizer_cov_trace_const_cmp4+0x4/0x90 [ 679.154190][T16418] ? copy_mount_options+0x308/0x3c0 [ 679.154202][T16418] ksys_mount+0xcc/0x100 [ 679.154214][T16418] __x64_sys_mount+0xbf/0xd0 [ 679.173288][T16418] do_syscall_64+0xf7/0x1c0 03:08:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x1300) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 679.173306][T16418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.173319][T16418] RIP: 0033:0x45c4aa [ 679.184654][T16418] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 679.193431][T16418] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 679.193440][T16418] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 679.193445][T16418] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 679.193450][T16418] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 679.193455][T16418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 679.193460][T16418] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:16 executing program 4 (fault-call:0 fault-nth:79): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 679.308990][T16424] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 679.318544][T16424] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4788}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 679.370598][T16434] FAULT_INJECTION: forcing a failure. [ 679.370598][T16434] name failslab, interval 1, probability 0, space 0, times 0 [ 679.395945][T16434] CPU: 0 PID: 16434 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 679.403868][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.403874][T16434] Call Trace: [ 679.403892][T16434] dump_stack+0x1d8/0x2f8 [ 679.403910][T16434] should_fail+0x555/0x770 [ 679.403927][T16434] __should_failslab+0x11a/0x160 [ 679.403937][T16434] ? vfs_parse_fs_string+0xed/0x1a0 [ 679.403948][T16434] should_failslab+0x9/0x20 [ 679.403961][T16434] __kmalloc_track_caller+0x79/0x340 [ 679.403975][T16434] kmemdup_nul+0x2a/0xa0 [ 679.403984][T16434] vfs_parse_fs_string+0xed/0x1a0 [ 679.404004][T16434] vfs_kern_mount+0x77/0x160 [ 679.404015][T16434] btrfs_mount+0x34f/0x18e0 [ 679.404030][T16434] ? check_preemption_disabled+0x47/0x2a0 [ 679.436176][T16434] ? vfs_parse_fs_string+0x13b/0x1a0 [ 679.436214][T16434] ? cap_capable+0x250/0x290 [ 679.436243][T16434] ? safesetid_security_capable+0x89/0xf0 [ 679.445977][T16434] legacy_get_tree+0xf9/0x1a0 [ 679.445990][T16434] ? btrfs_resize_thread_pool+0x290/0x290 [ 679.446003][T16434] vfs_get_tree+0x8b/0x2a0 [ 679.446015][T16434] do_mount+0x16c0/0x2510 [ 679.446030][T16434] ? copy_mount_options+0x308/0x3c0 [ 679.455273][T16434] ksys_mount+0xcc/0x100 [ 679.455286][T16434] __x64_sys_mount+0xbf/0xd0 [ 679.455300][T16434] do_syscall_64+0xf7/0x1c0 [ 679.455315][T16434] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.455324][T16434] RIP: 0033:0x45c4aa [ 679.455334][T16434] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 679.455340][T16434] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 679.455349][T16434] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 679.455355][T16434] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 679.455361][T16434] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 679.455367][T16434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 679.455372][T16434] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:16 executing program 4 (fault-call:0 fault-nth:80): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:16 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x88480000}}}}]}, 0x48}}, 0x0) 03:08:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='#! /file0\n'], 0xb) 03:08:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xf1ffffff}}}}]}, 0x48}}, 0x0) [ 679.631316][T16438] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 679.639414][T16438] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:08:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 679.728474][T16445] FAULT_INJECTION: forcing a failure. [ 679.728474][T16445] name failslab, interval 1, probability 0, space 0, times 0 [ 679.754040][T16445] CPU: 0 PID: 16445 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 679.761976][T16445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.761981][T16445] Call Trace: [ 679.761998][T16445] dump_stack+0x1d8/0x2f8 [ 679.762012][T16445] should_fail+0x555/0x770 [ 679.762031][T16445] __should_failslab+0x11a/0x160 [ 679.762045][T16445] should_failslab+0x9/0x20 [ 679.762056][T16445] kmem_cache_alloc_trace+0x5d/0x2f0 [ 679.762066][T16445] ? btrfs_mount_root+0x1b2/0x1040 [ 679.762078][T16445] btrfs_mount_root+0x1b2/0x1040 [ 679.762092][T16445] ? vfs_parse_fs_string+0x13b/0x1a0 [ 679.762101][T16445] ? rcu_read_lock_sched_held+0x10b/0x170 [ 679.762112][T16445] ? trace_kfree+0xb2/0x110 [ 679.762126][T16445] legacy_get_tree+0xf9/0x1a0 [ 679.762134][T16445] ? btrfs_control_open+0x40/0x40 [ 679.762146][T16445] vfs_get_tree+0x8b/0x2a0 [ 679.762159][T16445] vfs_kern_mount+0xc2/0x160 [ 679.762170][T16445] btrfs_mount+0x34f/0x18e0 [ 679.762187][T16445] ? check_preemption_disabled+0x47/0x2a0 [ 679.762201][T16445] ? vfs_parse_fs_string+0x13b/0x1a0 [ 679.809625][T16445] ? cap_capable+0x250/0x290 [ 679.809640][T16445] ? safesetid_security_capable+0x89/0xf0 [ 679.809655][T16445] legacy_get_tree+0xf9/0x1a0 [ 679.839149][T16445] ? btrfs_resize_thread_pool+0x290/0x290 [ 679.839164][T16445] vfs_get_tree+0x8b/0x2a0 [ 679.839179][T16445] do_mount+0x16c0/0x2510 [ 679.859187][T16445] ? copy_mount_options+0x308/0x3c0 [ 679.859199][T16445] ksys_mount+0xcc/0x100 [ 679.859211][T16445] __x64_sys_mount+0xbf/0xd0 [ 679.879841][T16445] do_syscall_64+0xf7/0x1c0 [ 679.879858][T16445] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.879869][T16445] RIP: 0033:0x45c4aa [ 679.902544][T16445] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 679.902551][T16445] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 679.902561][T16445] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 679.902567][T16445] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 679.902573][T16445] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 03:08:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a762fe6faf736305bda0be60f0837b35a98482b7a8d935751cbfd4acc219d92f4b2f00bf8c07a40000000000"], 0xb) 03:08:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) chmod(&(0x7f0000000040)='./file0\x00', 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) ioctl(r0, 0x20, &(0x7f00000000c0)="0ec77d842dbea5fc213953cda18977021cade0713186a0821a26324fea2b62f263cc21d9572741b1c0de29b8e5c845f5f67279e464019f0042d4573b1d10f98d004a3a70abd50c26ad642a829c5c22ca") write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:08:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a4472321202e2f66696c65300a"], 0xb) 03:08:16 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x1400) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:16 executing program 4 (fault-call:0 fault-nth:81): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 679.902578][T16445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 679.902584][T16445] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) prctl$PR_CAPBSET_READ(0x17, 0x25) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x40020a) write$cgroup_int(r1, &(0x7f0000000080), 0x12) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x141000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000180), &(0x7f0000000100)=0xfffffffffffffe85) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x305) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080), 0x8) listen(r3, 0xffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) r6 = socket$l2tp(0x18, 0x1, 0x1) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000140)) [ 680.088289][T16453] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 680.121325][T16467] FAULT_INJECTION: forcing a failure. [ 680.121325][T16467] name failslab, interval 1, probability 0, space 0, times 0 [ 680.131424][T16453] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 680.142570][T16467] CPU: 0 PID: 16467 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 680.150468][T16467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.160518][T16467] Call Trace: [ 680.163815][T16467] dump_stack+0x1d8/0x2f8 [ 680.168156][T16467] should_fail+0x555/0x770 [ 680.172573][T16467] __should_failslab+0x11a/0x160 [ 680.172597][T16467] ? getname_kernel+0x59/0x2f0 [ 680.172610][T16467] should_failslab+0x9/0x20 [ 680.172622][T16467] kmem_cache_alloc+0x56/0x2e0 [ 680.172635][T16467] getname_kernel+0x59/0x2f0 [ 680.172646][T16467] kern_path+0x1f/0x40 [ 680.172667][T16467] blkdev_get_by_path+0x71/0x270 [ 680.172682][T16467] btrfs_get_bdev_and_sb+0x48/0x280 [ 680.210289][T16467] open_fs_devices+0x14d/0xb40 [ 680.210306][T16467] ? list_sort+0x5fc/0x860 [ 680.210318][T16467] ? btrfs_open_devices+0x1b0/0x1b0 [ 680.210332][T16467] btrfs_open_devices+0x11d/0x1b0 [ 680.210345][T16467] btrfs_mount_root+0x6ef/0x1040 [ 680.219497][T16467] ? trace_kfree+0xb2/0x110 [ 680.219514][T16467] legacy_get_tree+0xf9/0x1a0 [ 680.219524][T16467] ? btrfs_control_open+0x40/0x40 [ 680.219536][T16467] vfs_get_tree+0x8b/0x2a0 [ 680.219550][T16467] vfs_kern_mount+0xc2/0x160 [ 680.229745][T16467] btrfs_mount+0x34f/0x18e0 [ 680.239149][T16467] ? check_preemption_disabled+0x47/0x2a0 [ 680.239169][T16467] ? vfs_parse_fs_string+0x13b/0x1a0 [ 680.239180][T16467] ? cap_capable+0x250/0x290 [ 680.239195][T16467] ? safesetid_security_capable+0x89/0xf0 [ 680.239208][T16467] legacy_get_tree+0xf9/0x1a0 03:08:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4888}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 680.239219][T16467] ? btrfs_resize_thread_pool+0x290/0x290 [ 680.257872][T16467] vfs_get_tree+0x8b/0x2a0 [ 680.277894][T16467] do_mount+0x16c0/0x2510 [ 680.277912][T16467] ? copy_mount_options+0x308/0x3c0 [ 680.277925][T16467] ksys_mount+0xcc/0x100 [ 680.277938][T16467] __x64_sys_mount+0xbf/0xd0 [ 680.277952][T16467] do_syscall_64+0xf7/0x1c0 [ 680.277967][T16467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.302779][T16467] RIP: 0033:0x45c4aa [ 680.302788][T16467] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 680.302793][T16467] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 680.302802][T16467] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 680.302808][T16467] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 680.302814][T16467] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 680.302819][T16467] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 680.302823][T16467] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 680.313820][ C1] net_ratelimit: 24 callbacks suppressed [ 680.313827][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 680.313873][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xffffa888}}}}]}, 0x48}}, 0x0) 03:08:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x88a8ffff}}}}]}, 0x48}}, 0x0) 03:08:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:17 executing program 4 (fault-call:0 fault-nth:82): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:17 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x1800) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 680.577320][T16486] FAULT_INJECTION: forcing a failure. [ 680.577320][T16486] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 680.590555][T16486] CPU: 1 PID: 16486 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 680.598446][T16486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.608500][T16486] Call Trace: [ 680.611802][T16486] dump_stack+0x1d8/0x2f8 [ 680.616131][T16486] should_fail+0x555/0x770 [ 680.620547][T16486] should_fail_alloc_page+0x55/0x60 [ 680.625753][T16486] prepare_alloc_pages+0x283/0x460 [ 680.630876][T16486] __alloc_pages_nodemask+0xb2/0x5d0 [ 680.636170][T16486] kmem_getpages+0x4d/0xa00 [ 680.640678][T16486] cache_grow_begin+0x7e/0x2c0 [ 680.645438][T16486] cache_alloc_refill+0x311/0x3f0 [ 680.650455][T16486] ? check_preemption_disabled+0xb7/0x2a0 [ 680.656188][T16486] kmem_cache_alloc_trace+0x2d0/0x2f0 [ 680.661558][T16486] ? btrfs_mount_root+0x12c/0x1040 [ 680.666665][T16486] btrfs_mount_root+0x12c/0x1040 [ 680.671605][T16486] ? vfs_parse_fs_string+0x13b/0x1a0 [ 680.676883][T16486] ? rcu_read_lock_sched_held+0x10b/0x170 [ 680.682600][T16486] ? trace_kfree+0xb2/0x110 [ 680.687095][T16486] legacy_get_tree+0xf9/0x1a0 [ 680.691806][T16486] ? btrfs_control_open+0x40/0x40 [ 680.696825][T16486] vfs_get_tree+0x8b/0x2a0 [ 680.701246][T16486] vfs_kern_mount+0xc2/0x160 [ 680.705834][T16486] btrfs_mount+0x34f/0x18e0 [ 680.710348][T16486] ? check_preemption_disabled+0x47/0x2a0 [ 680.716063][T16486] ? vfs_parse_fs_string+0x13b/0x1a0 [ 680.721341][T16486] ? cap_capable+0x250/0x290 [ 680.725924][T16486] ? safesetid_security_capable+0x89/0xf0 [ 680.731651][T16486] legacy_get_tree+0xf9/0x1a0 [ 680.736322][T16486] ? btrfs_resize_thread_pool+0x290/0x290 [ 680.742037][T16486] vfs_get_tree+0x8b/0x2a0 [ 680.746448][T16486] do_mount+0x16c0/0x2510 [ 680.750865][T16486] ? copy_mount_options+0x308/0x3c0 [ 680.756062][T16486] ksys_mount+0xcc/0x100 [ 680.760299][T16486] __x64_sys_mount+0xbf/0xd0 [ 680.764884][T16486] do_syscall_64+0xf7/0x1c0 [ 680.769558][T16486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.775445][T16486] RIP: 0033:0x45c4aa [ 680.779335][T16486] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 680.798932][T16486] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 680.807340][T16486] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 680.815304][T16486] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 03:08:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 680.823287][T16486] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 680.831249][T16486] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 680.839217][T16486] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:17 executing program 4 (fault-call:0 fault-nth:83): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321204b2f041a9625300a6b928911633d5219d4f9fab3c9722707000000a05e2ecbaa7f1786f8d384d8fd7cf7051d52e33aeee4fcd2b725214863ce5a9149e01902794a24c3160a99e5547dbfe1aca64571981dac7bee7dabe5f1a30b4e83bc12fd3223c672ddb838595bd55e47739ac522c57124b48f9e700c08c6ab5de580f4ba855c308c4385c8dab62838eb4628e2ae94138e3c80fcd55ce04dd64f4bc45521fbd3d32f584d5857f857f68d295cef3a3347246a5987b18d12525737e32bab6c122708e9de6ce7318b803d75326371ceeabf21eb9c7588a942ee4ec26936c779a1318ba4"], 0xb) 03:08:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xffffff7f}}}}]}, 0x48}}, 0x0) 03:08:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:17 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0x9effffff}}}}]}, 0x48}}, 0x0) [ 681.094507][T16502] FAULT_INJECTION: forcing a failure. [ 681.094507][T16502] name failslab, interval 1, probability 0, space 0, times 0 [ 681.107501][T16502] CPU: 1 PID: 16502 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 681.107542][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.107549][T16502] Call Trace: [ 681.128766][T16502] dump_stack+0x1d8/0x2f8 [ 681.133097][T16502] should_fail+0x555/0x770 [ 681.137520][T16502] __should_failslab+0x11a/0x160 [ 681.142451][T16502] ? xas_create+0x1197/0x1910 [ 681.142463][T16502] should_failslab+0x9/0x20 [ 681.142475][T16502] kmem_cache_alloc+0x56/0x2e0 [ 681.142487][T16502] xas_create+0x1197/0x1910 [ 681.142497][T16502] ? rcu_lock_release+0x4/0x20 [ 681.142516][T16502] xas_store+0x95/0x1440 [ 681.142528][T16502] ? xas_load+0x434/0x450 [ 681.156416][T16502] __add_to_page_cache_locked+0x5f0/0xbf0 [ 681.165647][T16502] ? workingset_activation+0x2b0/0x2b0 [ 681.165660][T16502] add_to_page_cache_lru+0x156/0x4a0 [ 681.165677][T16502] do_read_cache_page+0x216/0xcb0 [ 681.195618][T16502] read_cache_page_gfp+0x29/0x30 [ 681.200572][T16502] btrfs_scan_one_device+0x16a/0x450 [ 681.205869][T16502] ? trace_hardirqs_on+0x74/0x80 [ 681.210814][T16502] btrfs_mount_root+0x4af/0x1040 [ 681.215772][T16502] ? trace_kfree+0xb2/0x110 [ 681.220283][T16502] legacy_get_tree+0xf9/0x1a0 [ 681.224955][T16502] ? btrfs_control_open+0x40/0x40 [ 681.229976][T16502] vfs_get_tree+0x8b/0x2a0 [ 681.234386][T16502] vfs_kern_mount+0xc2/0x160 [ 681.238972][T16502] btrfs_mount+0x34f/0x18e0 [ 681.243476][T16502] ? check_preemption_disabled+0x47/0x2a0 [ 681.249192][T16502] ? vfs_parse_fs_string+0x13b/0x1a0 [ 681.254466][T16502] ? cap_capable+0x250/0x290 [ 681.259053][T16502] ? safesetid_security_capable+0x89/0xf0 [ 681.264768][T16502] legacy_get_tree+0xf9/0x1a0 [ 681.269435][T16502] ? btrfs_resize_thread_pool+0x290/0x290 [ 681.275149][T16502] vfs_get_tree+0x8b/0x2a0 [ 681.279556][T16502] do_mount+0x16c0/0x2510 [ 681.283883][T16502] ? copy_mount_options+0x308/0x3c0 [ 681.289096][T16502] ksys_mount+0xcc/0x100 [ 681.293334][T16502] __x64_sys_mount+0xbf/0xd0 [ 681.297919][T16502] do_syscall_64+0xf7/0x1c0 [ 681.304762][T16502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.310664][T16502] RIP: 0033:0x45c4aa [ 681.314557][T16502] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 681.334152][T16502] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 03:08:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r1, 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x5, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x20}, 0x4) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:08:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6558}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 681.342557][T16502] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 681.350536][T16502] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 681.358510][T16502] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 681.366480][T16502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 681.374446][T16502] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 681.382707][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 681.388643][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:18 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x3080) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) 03:08:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6800}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 681.431264][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 681.437091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 681.442947][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 681.448701][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:08:18 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x15, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe16}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xefd, 0x0, &(0x7f0000000a80)="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", 0x0, 0x3}, 0x40) r1 = io_uring_setup(0xa9b, &(0x7f00000000c0)={0x0, 0x0, 0xa40458c94c507c9, 0x0, 0x1d9}) sendfile(r0, r1, &(0x7f0000000040), 0x7f) r2 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 03:08:18 executing program 4 (fault-call:0 fault-nth:84): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) [ 681.619494][T16529] FAULT_INJECTION: forcing a failure. [ 681.619494][T16529] name failslab, interval 1, probability 0, space 0, times 0 [ 681.632493][T16529] CPU: 0 PID: 16529 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 681.640397][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.650443][T16529] Call Trace: [ 681.650464][T16529] dump_stack+0x1d8/0x2f8 [ 681.658053][T16529] should_fail+0x555/0x770 [ 681.662467][T16529] __should_failslab+0x11a/0x160 [ 681.662480][T16529] ? getname_kernel+0x59/0x2f0 [ 681.662492][T16529] should_failslab+0x9/0x20 [ 681.662505][T16529] kmem_cache_alloc+0x56/0x2e0 [ 681.662519][T16529] getname_kernel+0x59/0x2f0 [ 681.662529][T16529] kern_path+0x1f/0x40 [ 681.662539][T16529] blkdev_get_by_path+0x71/0x270 [ 681.662553][T16529] btrfs_scan_one_device+0xbd/0x450 [ 681.662561][T16529] ? btrfs_mount_root+0x477/0x1040 [ 681.662575][T16529] ? trace_hardirqs_on+0x74/0x80 [ 681.672234][T16529] btrfs_mount_root+0x4af/0x1040 [ 681.672258][T16529] ? trace_kfree+0xb2/0x110 03:08:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x40020a) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) socket$inet6(0xa, 0x0, 0x40) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r4, 0x0, 0x10}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r5, 0x1}, &(0x7f0000000180)=0x8) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) [ 681.672274][T16529] legacy_get_tree+0xf9/0x1a0 [ 681.672283][T16529] ? btrfs_control_open+0x40/0x40 [ 681.672295][T16529] vfs_get_tree+0x8b/0x2a0 [ 681.672307][T16529] vfs_kern_mount+0xc2/0x160 [ 681.672318][T16529] btrfs_mount+0x34f/0x18e0 [ 681.672335][T16529] ? check_preemption_disabled+0x47/0x2a0 [ 681.672349][T16529] ? vfs_parse_fs_string+0x13b/0x1a0 [ 681.672359][T16529] ? cap_capable+0x250/0x290 [ 681.672373][T16529] ? safesetid_security_capable+0x89/0xf0 [ 681.672386][T16529] legacy_get_tree+0xf9/0x1a0 [ 681.672395][T16529] ? btrfs_resize_thread_pool+0x290/0x290 [ 681.672406][T16529] vfs_get_tree+0x8b/0x2a0 [ 681.672417][T16529] do_mount+0x16c0/0x2510 [ 681.672431][T16529] ? copy_mount_options+0x308/0x3c0 [ 681.672447][T16529] ksys_mount+0xcc/0x100 [ 681.686247][T16529] __x64_sys_mount+0xbf/0xd0 [ 681.686265][T16529] do_syscall_64+0xf7/0x1c0 [ 681.686282][T16529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.686291][T16529] RIP: 0033:0x45c4aa [ 681.686301][T16529] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 681.686307][T16529] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 681.686317][T16529] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 681.686326][T16529] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 681.700454][T16529] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 681.700460][T16529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 681.700466][T16529] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 681.761177][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 681.775468][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:08:18 executing program 4 (fault-call:0 fault-nth:85): syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000240)="8da4363ac0ed0200000000000001004d010900000000000000007a0000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d1f1d029d62a99fecbc9dbca1d918967d9cae7effd3059b5635bd007b5f2741a1f6f57f829e75abe59c978539cf5384fec60f079b62ee94bfba6a16f7e31982db737877e89e7b5222d07d773e8586f1b2cd783834118f845c2451f6e41e38896e48f447472ab68b77c366736e04050532b090942d7174", 0xbe, 0x10000}], 0x0, 0x0) 03:08:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) 03:08:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x2, {0x0, [], 0xffffff9e}}}}]}, 0x48}}, 0x0) 03:08:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x4, 0x1, {0x0, [], 0xb2101245}}}}]}, 0x48}}, 0x0) [ 682.017417][T16540] FAULT_INJECTION: forcing a failure. [ 682.017417][T16540] name failslab, interval 1, probability 0, space 0, times 0 [ 682.072606][T16540] CPU: 0 PID: 16540 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 682.080543][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.090598][T16540] Call Trace: [ 682.093928][T16540] dump_stack+0x1d8/0x2f8 [ 682.098271][T16540] should_fail+0x555/0x770 [ 682.102700][T16540] __should_failslab+0x11a/0x160 [ 682.107641][T16540] ? bio_alloc_bioset+0x118/0x5f0 [ 682.112669][T16540] should_failslab+0x9/0x20 [ 682.117166][T16540] __kmalloc+0x7a/0x340 [ 682.121498][T16540] bio_alloc_bioset+0x118/0x5f0 [ 682.126521][T16540] ? kmem_cache_alloc_trace+0x23a/0x2f0 [ 682.132059][T16540] ? btrfs_alloc_device+0x78/0x580 [ 682.137174][T16540] btrfs_alloc_device+0xa7/0x580 [ 682.142105][T16540] ? blkdev_put+0x2c8/0x3b0 [ 682.146604][T16540] close_fs_devices+0x4ae/0x8d0 [ 682.151464][T16540] btrfs_close_devices+0x33/0x130 [ 682.156481][T16540] btrfs_mount_root+0xa9d/0x1040 [ 682.161427][T16540] ? trace_kfree+0xb2/0x110 [ 682.165930][T16540] legacy_get_tree+0xf9/0x1a0 [ 682.170610][T16540] ? btrfs_control_open+0x40/0x40 [ 682.175641][T16540] vfs_get_tree+0x8b/0x2a0 [ 682.180054][T16540] vfs_kern_mount+0xc2/0x160 [ 682.184651][T16540] btrfs_mount+0x34f/0x18e0 [ 682.189420][T16540] ? check_preemption_disabled+0x47/0x2a0 [ 682.195227][T16540] ? vfs_parse_fs_string+0x13b/0x1a0 [ 682.200504][T16540] ? cap_capable+0x250/0x290 [ 682.205106][T16540] ? safesetid_security_capable+0x89/0xf0 [ 682.210841][T16540] legacy_get_tree+0xf9/0x1a0 [ 682.215528][T16540] ? btrfs_resize_thread_pool+0x290/0x290 [ 682.221250][T16540] vfs_get_tree+0x8b/0x2a0 [ 682.225666][T16540] do_mount+0x16c0/0x2510 [ 682.230088][T16540] ? copy_mount_options+0x308/0x3c0 [ 682.235288][T16540] ksys_mount+0xcc/0x100 [ 682.239532][T16540] __x64_sys_mount+0xbf/0xd0 [ 682.244137][T16540] do_syscall_64+0xf7/0x1c0 [ 682.248650][T16540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.254543][T16540] RIP: 0033:0x45c4aa [ 682.258433][T16540] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 682.278119][T16540] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 682.286527][T16540] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 682.294494][T16540] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 682.302594][T16540] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 682.311169][T16540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 682.319130][T16540] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 03:08:19 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x3f00) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}, @in={0x2, 0x4e24, @remote}], 0x20) [ 682.353925][T16540] ------------[ cut here ]------------ [ 682.359420][T16540] kernel BUG at fs/btrfs/volumes.c:1266! [ 682.388408][T16540] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 682.394510][T16540] CPU: 0 PID: 16540 Comm: syz-executor.4 Not tainted 5.4.0-rc2+ #0 [ 682.402394][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.412458][T16540] RIP: 0010:close_fs_devices+0x8c1/0x8d0 [ 682.418086][T16540] Code: 6c fa fe 48 8b 5d c0 e9 73 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 7c 87 48 89 df e8 a9 6c fa fe e9 7a ff ff ff e8 9f 2e c1 fe <0f> 0b e8 98 2e c1 fe 0f 0b 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 [ 682.425848][T16545] kobject: 'veth1678' (000000006ce55c11): kobject_add_internal: parent: 'net', set: 'devices' [ 682.437682][T16540] RSP: 0018:ffff8880156bf9a0 EFLAGS: 00010246 [ 682.437690][T16540] RAX: ffffffff82b20281 RBX: ffff88801cca10e8 RCX: 0000000000040000 [ 682.437694][T16540] RDX: ffffc9000e7b1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 682.437699][T16540] RBP: ffff8880156bfa30 R08: ffff888016112c18 R09: fffffbfff12bb6b5 [ 682.437703][T16540] R10: fffffbfff12bb6b5 R11: 0000000000000000 R12: dffffc0000000000 [ 682.437707][T16540] R13: ffff88801cca10f0 R14: ffff88801cca1000 R15: ffff888028b32800 [ 682.437713][T16540] FS: 00007fd89d2b4700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 682.437718][T16540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 682.437722][T16540] CR2: 0000001b30123000 CR3: 000000009577a000 CR4: 00000000001406f0 [ 682.437730][T16540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 682.437734][T16540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 682.437737][T16540] Call Trace: [ 682.437761][T16540] btrfs_close_devices+0x33/0x130 [ 682.475887][T16545] kobject: 'veth1678' (000000006ce55c11): kobject_uevent_env [ 682.477880][T16540] btrfs_mount_root+0xa9d/0x1040 [ 682.477896][T16540] ? trace_kfree+0xb2/0x110 [ 682.477908][T16540] legacy_get_tree+0xf9/0x1a0 [ 682.500163][T16545] kobject: 'veth1678' (000000006ce55c11): fill_kobj_path: path = '/devices/virtual/net/veth1678' [ 682.502722][T16540] ? btrfs_control_open+0x40/0x40 [ 682.502734][T16540] vfs_get_tree+0x8b/0x2a0 [ 682.502746][T16540] vfs_kern_mount+0xc2/0x160 [ 682.502755][T16540] btrfs_mount+0x34f/0x18e0 [ 682.502769][T16540] ? check_preemption_disabled+0x47/0x2a0 [ 682.502780][T16540] ? vfs_parse_fs_string+0x13b/0x1a0 [ 682.513973][T16545] kobject: 'queues' (00000000043ece93): kobject_add_internal: parent: 'veth1678', set: '' [ 682.517295][T16540] ? cap_capable+0x250/0x290 [ 682.517309][T16540] ? safesetid_security_capable+0x89/0xf0 [ 682.517321][T16540] legacy_get_tree+0xf9/0x1a0 [ 682.541157][T16545] kobject: 'queues' (00000000043ece93): kobject_uevent_env [ 682.541497][T16540] ? btrfs_resize_thread_pool+0x290/0x290 [ 682.557560][T16545] kobject: 'queues' (00000000043ece93): kobject_uevent_env: filter function caused the event to drop! 03:08:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x4}]]}}}]}, 0x4c}}, 0x0) [ 682.558236][T16540] vfs_get_tree+0x8b/0x2a0 [ 682.558248][T16540] do_mount+0x16c0/0x2510 [ 682.569572][T16545] kobject: 'rx-0' (00000000678bb274): kobject_add_internal: parent: 'queues', set: 'queues' [ 682.573367][T16540] ? copy_mount_options+0x308/0x3c0 [ 682.573377][T16540] ksys_mount+0xcc/0x100 [ 682.573386][T16540] __x64_sys_mount+0xbf/0xd0 [ 682.573398][T16540] do_syscall_64+0xf7/0x1c0 [ 682.573409][T16540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.573420][T16540] RIP: 0033:0x45c4aa [ 682.582898][T16545] kobject: 'rx-0' (00000000678bb274): kobject_uevent_env [ 682.587375][T16540] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 682.587381][T16540] RSP: 002b:00007fd89d2b3a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 682.587390][T16540] RAX: ffffffffffffffda RBX: 00007fd89d2b3b40 RCX: 000000000045c4aa [ 682.587395][T16540] RDX: 00007fd89d2b3ae0 RSI: 0000000020000100 RDI: 00007fd89d2b3b00 [ 682.587403][T16540] RBP: 0000000000000001 R08: 00007fd89d2b3b40 R09: 00007fd89d2b3ae0 [ 682.601750][T16545] kobject: 'rx-0' (00000000678bb274): fill_kobj_path: path = '/devices/virtual/net/veth1678/queues/rx-0' [ 682.602916][T16540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 682.602922][T16540] R13: 00000000004c8da6 R14: 00000000004e0200 R15: 0000000000000003 [ 682.602933][T16540] Modules linked in: [ 682.626557][T16545] kobject: 'tx-0' (00000000154a7276): kobject_add_internal: parent: 'queues', set: 'queues' [ 682.656590][T16540] ---[ end trace 767834a3be8df50c ]--- 03:08:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "3a208f360eb7b0a7e29245b24d3e791a94b8fb67d317a4566abe8950e38d77d619f1b72ffe317655a828bfb819e80e49e9c570eebae1a3393b03d038e162dd20aa1f6d1bc076aa8e58db"}, 0x55) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000000c0)={0x0, 0xfffffeff, 0xb9, &(0x7f0000000040)=0x9}) [ 682.662820][ T3892] kobject: 'loop2' (00000000d13e8775): kobject_uevent_env [ 682.679741][T16540] RIP: 0010:close_fs_devices+0x8c1/0x8d0 [ 682.681008][ T3892] kobject: 'loop2' (00000000d13e8775): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 682.687389][T16540] Code: 6c fa fe 48 8b 5d c0 e9 73 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 7c 87 48 89 df e8 a9 6c fa fe e9 7a ff ff ff e8 9f 2e c1 fe <0f> 0b e8 98 2e c1 fe 0f 0b 66 0f 1f 44 00 00 55 48 89 e5 41 57 41 [ 682.705916][T16545] kobject: 'tx-0' (00000000154a7276): kobject_uevent_env [ 682.709524][T16540] RSP: 0018:ffff8880156bf9a0 EFLAGS: 00010246 [ 682.734843][T16545] kobject: 'tx-0' (00000000154a7276): fill_kobj_path: path = '/devices/virtual/net/veth1678/queues/tx-0' [ 682.736718][T16545] kobject: 'batman_adv' (00000000fdd9d4aa): kobject_add_internal: parent: 'veth1678', set: '' [ 682.763590][T16540] RAX: ffffffff82b20281 RBX: ffff88801cca10e8 RCX: 0000000000040000 [ 682.777249][T16545] kobject: 'veth1679' (00000000dc9fbada): kobject_add_internal: parent: 'net', set: 'devices' [ 682.808916][T16540] RDX: ffffc9000e7b1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 682.818129][T16545] kobject: 'veth1679' (00000000dc9fbada): kobject_uevent_env [ 682.820241][ T3892] kobject: 'loop4' (000000003d354769): kobject_uevent_env [ 682.829392][T16545] kobject: 'veth1679' (00000000dc9fbada): fill_kobj_path: path = '/devices/virtual/net/veth1679' [ 682.849039][T16540] RBP: ffff8880156bfa30 R08: ffff888016112c18 R09: fffffbfff12bb6b5 [ 682.858210][T16545] kobject: 'queues' (000000001ae99849): kobject_add_internal: parent: 'veth1679', set: '' 03:08:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) chmod(&(0x7f0000000040)='./file0\x00', 0x0) [ 682.862019][T16540] R10: fffffbfff12bb6b5 R11: 0000000000000000 R12: dffffc0000000000 [ 682.876086][T16545] kobject: 'queues' (000000001ae99849): kobject_uevent_env [ 682.883795][ T3892] kobject: 'loop4' (000000003d354769): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 682.894060][T16540] R13: ffff88801cca10f0 R14: ffff88801cca1000 R15: ffff888028b32800 [ 682.977976][T16545] kobject: 'queues' (000000001ae99849): kobject_uevent_env: filter function caused the event to drop! [ 682.992682][T16540] FS: 00007fd89d2b4700(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000 [ 683.003380][ T3892] kobject: 'loop1' (000000009553fbe0): kobject_uevent_env [ 683.007205][T16540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.020479][T16540] CR2: 000000000075c000 CR3: 000000009577a000 CR4: 00000000001406e0 [ 683.022641][ T3892] kobject: 'loop1' (000000009553fbe0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 683.028601][T16540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 683.042108][T16545] kobject: 'rx-0' (00000000220c3c6c): kobject_add_internal: parent: 'queues', set: 'queues' 03:08:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0', [{}, {0x20, '$mime_type-'}, {0x20, 'amd5sumwlan0}'}, {0x20, '#! '}, {0x20, '#! '}], 0xa, "fe1b059dd94248e900a7d9b6c4c0024b85b9a7e5ef7e4da95f5ad6412d9ea8cc53"}, 0x4f) [ 683.060112][T16540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 683.062083][ T3892] kobject: 'loop1' (000000009553fbe0): kobject_uevent_env [ 683.068423][T16545] kobject: 'rx-0' (00000000220c3c6c): kobject_uevent_env [ 683.077939][ T3892] kobject: 'loop1' (000000009553fbe0): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 683.084281][T16545] kobject: 'rx-0' (00000000220c3c6c): fill_kobj_path: path = '/devices/virtual/net/veth1679/queues/rx-0' [ 683.104466][T16540] Kernel panic - not syncing: Fatal exception [ 683.106278][ T3892] kobject: 'loop1' (000000009553fbe0): kobject_uevent_env [ 683.111989][T16540] Kernel Offset: disabled [ 683.123372][T16540] Rebooting in 86400 seconds..