={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:46:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x14000000, 0x0) 20:46:47 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r0 = getpid() perf_event_open(0x0, r0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0xfffffffffffffe4b, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB="2c6673636f6e746700000100000000698ac7a9333fcf6e"]) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x17000000, 0x0) 20:46:47 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='ramfs\x00', 0x8082, 0x0) mount$incfs(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0xd000}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 605.568317][T20100] __nla_validate_parse: 12 callbacks suppressed [ 605.568324][T20100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000004808001b"], 0x30}}, 0x0) 20:46:47 executing program 1: ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/72) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f0000000380)=0x1e) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/23, 0x17) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x8d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0xa, 0x24, 0x5, 0x0, 0x0, "0fd222e1f7"}, @feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0xffffffffffffff80) [ 605.619344][T20104] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x18000000, 0x0) 20:46:47 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000004c08001b"], 0x30}}, 0x0) 20:46:47 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x10, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 605.663725][T20104] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 605.684518][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x20000000, 0x0) [ 605.741881][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:47 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x20100000, 0x0) [ 605.806235][T20129] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 605.851802][T20129] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:46:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000006008001b"], 0x30}}, 0x0) [ 606.504275][T20140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.221672][T20150] cgroup1: Unknown subsys name 'perf_event' [ 607.227787][T20150] cgroup1: Unknown subsys name 'net_cls' [ 607.264055][T20150] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.271144][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.278831][T20150] device bridge_slave_0 entered promiscuous mode [ 607.285779][T20150] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.292815][T20150] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.300331][T20150] device bridge_slave_1 entered promiscuous mode [ 607.336115][T20150] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.343330][T20150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.350616][T20150] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.357652][T20150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.378324][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.386130][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.393528][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 607.401497][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 607.410846][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 607.419526][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.426662][ T9656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.446179][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 607.454415][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 607.462699][T17811] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.469740][T17811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.477156][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.485028][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 607.497825][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 607.511187][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 607.527488][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 607.539727][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:46:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x11, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x24000000, 0x0) 20:46:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = syz_io_uring_setup(0x2de5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) chdir(&(0x7f0000000280)='./bus\x00') r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1a, 0x0, {0x0, r4}}, 0xffffffff) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x118, &(0x7f0000000040)=0x1, 0x0, 0x4) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000fee000/0x10000)=nil, 0x10000}, &(0x7f00000003c0)=0x10) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000400)) 20:46:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000006808001b"], 0x30}}, 0x0) 20:46:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:46:49 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00H', @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000000000000800a100a50d000005001901040000000800a10095a8000008009f0007000000050018012d000000050018013b00000008002600d5160000"], 0x60}}, 0x0) dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40478, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="4d6b17942031a7fe16057f9ec65cf72020dfe1fe6aa4a15643efaacb6ad932746a31cc3c5fefd2327bbd4334afbed54d11c879a6d8d6a9b17639d7ff6d900609ee0c54c9a257dabe4f07accdedf1f25e87181cb0d399000009"], 0x50}}, 0x8800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) [ 607.573688][T20156] new mount options do not match the existing superblock, will be ignored [ 607.602624][T20158] new mount options do not match the existing superblock, will be ignored 20:46:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000006c08001b"], 0x30}}, 0x0) 20:46:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x3f000000, 0x0) [ 607.633086][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.661145][T20170] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:49 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f00000003c0)=0x10) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000017208001b"], 0x30}}, 0x0) 20:46:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x40000000, 0x0) 20:46:49 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x12, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:49 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x41000000, 0x0) [ 607.663002][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 607.693067][T20170] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:49 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x44) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@appraise_type='appraise_type=imasig'}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:49 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = signalfd4(r0, &(0x7f0000000040), 0x8, 0x80000) ioctl$RTC_AIE_OFF(r1, 0x7002) 20:46:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000007408001b"], 0x30}}, 0x0) [ 607.860543][T20187] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 607.908049][T20187] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 607.945684][T20198] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 608.319893][ T163] device bridge_slave_1 left promiscuous mode [ 608.326117][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.333536][ T163] device bridge_slave_0 left promiscuous mode [ 608.339776][ T163] bridge0: port 1(bridge_slave_0) entered disabled state 20:46:50 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x13, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:46:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x80040000, 0x0) 20:46:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000007a08001b"], 0x30}}, 0x0) 20:46:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)="0ca49362abe1a5d5be88902e00699153af4f0336035d93519aa401062805ab4bd5effafc17acf8333da250dfd819fc3a6878609d0d317787e6275042fb4db7f6dac51c4f465498f5e86ba49c2b4e6351f1d34047fadd574145d8b428507fcc0998582bbd96edce9cf8c328e81daf20da50ac4efb3a96a02c627b09b78b4bd15f3608") read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffffc, r1, {0x9}}, 0x18) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r4, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r2], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000002d00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000023c0)={0x934, r4, 0xff79f0745c6d2b73, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_IE={0x47, 0x2a, [@chsw_timing={0x68, 0x4, {0x4, 0x100}}, @preq={0x82, 0x3b, @not_ext={{0x0, 0x1}, 0x7f, 0xff, 0x97c4, @device_b, 0xc2c0, "", 0x5, 0xffffffff, 0x3, [{{0x1, 0x0, 0x1}, @device_a, 0x8}, {{}, @device_a, 0x9}, {{0x1}, @device_b, 0x9}]}}]}, @NL80211_ATTR_PROBE_RESP={0x665, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x26d, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x20}, @device_b, @broadcast, @initial, {0xf}}, 0x3ff, @random=0x6, 0x3, @void, @val={0x1, 0x8, [{0x16, 0x1}, {0x4, 0x1}, {0x6}, {0x9, 0x1}, {0x18}, {0xc, 0x1}, {0x30, 0x1}, {0x30, 0x1}]}, @void, @val={0x4, 0x6, {0x1, 0x2, 0x800, 0x3}}, @void, @void, @val={0x25, 0x3, {0x1, 0x6c, 0x4}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0xde, "b69ce6ac4c719d5e67075f9a52a9a421e5c194e9d010882a5c8c768ce8c8c0008e2b2eacfa092ce6e8641cebc10d2b3b9892aa854832c89477df8638af90ffc69f6e64a21366c2b584be512fd92d6691239974f1c018bf90dad32a9054d840cf6921f59554492a8520870bdab8f68ca089479651f5895543fcb5be03fa79a5b25681af31b4ed9f8968b879fe4b65bb68207388b29448d9662abf25407ea590e93521aec710cb250044b26fb6a842b47e811b07928148084d89a42a0807ba16c580478f753df02a8d157b2597831791d8680856c3fe556016b8571dc34896"}, {0xdd, 0x7f, "8190c0486d7da894ddb3eb434248cb9a398d92c6dd3702f0f1652e8db87a730170be25eb15a526cf4bd82290735fd781cf540bfe50a5de88ca2a8bcc831242ffff7ddbf0de2ae6d2ec15a367433c3fa09707148d5a9cf96c61c2d5f396c4361c49b3647cdc3ac2fd57af7279241bed89fe392d23721c2376a22db9f90eab88"}, {0xdd, 0xcb, "5ae8f5a71f367c80bf8667a0a15bb358834d36c522d965ebcc80dda1a3b8861de691c82ce73569afcbbfc637f11e60a6a33d28f89c128e2d58b547e3b548396e6c1fb48e452efeee78df3db6e52c821a3b2bfbccea2c3b19cfe900f34f11948b975c532158b42e8777d414dcc5f058d39767338a8ffc3df66c3ce3fb1a86c580b01105227e2ad3a9085f1092c07698f175fff9842a7a595f9bc81693c7cc53122bc9786ca64b685640774698693b3022e61827331de6673d02af5d7fa3a20328428b11485e15b8ba3189d4"}]}}]]}, 0x934}, 0x1, 0x0, 0x0, 0x44}, 0x0) 20:46:50 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x8cffffff, 0x0) 20:46:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x0, 0x3}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:46:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000ffffff9e08001b"], 0x30}}, 0x0) 20:46:50 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0/file0\x00', 0xe, 0x1) mount$incfs(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 608.557781][T20205] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 608.577581][T20210] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 608.595555][T20210] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 608.637033][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 608.648193][T20221] incfs: Error accessing: ./file0/file0. [ 608.656215][T20221] incfs: Error accessing: ./file0/file0. [ 609.353187][T20231] cgroup1: Unknown subsys name 'perf_event' [ 609.359617][T20231] cgroup1: Unknown subsys name 'net_cls' [ 609.395117][T20231] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.402430][T20231] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.409884][T20231] device bridge_slave_0 entered promiscuous mode [ 609.416748][T20231] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.423799][T20231] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.431246][T20231] device bridge_slave_1 entered promiscuous mode [ 609.464459][T20231] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.471498][T20231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.478783][T20231] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.485818][T20231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.506709][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.514293][T17811] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.522133][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.535843][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.543961][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.550993][ T9656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.558489][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.566805][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.573815][ T9656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.583580][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.592570][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.607066][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 609.625788][ T9660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 609.634194][ T9660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 609.642533][ T9660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.654059][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:46:51 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000000000000800a11a00a50d000005001901040000000800a10095a8000008009f0007000000050018012d000000050018013b00000008002600d51600"], 0x60}}, 0x0) dup(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x68, 0x3, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008800}, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB="22ceb45c77c373b3fed03bebaa03ed0ebae1a3a95113ca8f0a29a439ad54f894050fc409fcf0e5209f1b2c05fc2e46f9c08312d5b11c68ecda023bd69d9ac80f14f92f063b7fe82294fcfa7807f90348c4525c3b674252ac6e12fa4c14411a3d4697947497ba59956b411f715481408a9ddc4799d36884eee5585839f246c8b87ad1500127acfed1198c157923d08825ef59c07723fbb9fbff030000172775e6"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="8c052acc780f089deff02e4d822d49be3123f7265e8e3aa6d1813f9c8a8afde94f06fff31c6817b5c350653bab31697ebebf16b48171ff888e35d5f82c794331b33a92cca20d26"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xa1ffffff, 0x0) 20:46:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x14, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000010) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/155) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000ffffffc308001b"], 0x30}}, 0x0) 20:46:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) [ 609.682034][T20237] new mount options do not match the existing superblock, will be ignored [ 609.711396][T20238] new mount options do not match the existing superblock, will be ignored 20:46:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xbd030000, 0x0) 20:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000ffffffea08001b"], 0x30}}, 0x0) 20:46:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xc0ed0000, 0x0) [ 609.742158][T20246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000ffffffef08001b"], 0x30}}, 0x0) 20:46:51 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="48d2d700d303"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:51 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x5e, 0x78, &(0x7f0000000540)="d149c4ac7499537a4a065830299334f4d0523c84daab434517496a68924b0298f87b4551d70c4b61a1e4ada964270d274c83de267c40e343e970c1e26249e8e92fb8ed1fe022a5439c3490a0da9ee373175698ccc716ad82aefcbfe0fc2a", &(0x7f00000005c0)=""/120, 0x4b6, 0x0, 0xbb, 0xb8, &(0x7f0000000640)="69ff8bf5d4772e37b952ad85528ead906aaebef0a3c77aff4716e53e0a5b4ca272361f7d57f18505f1cd096cfac1d508e65f3d448f06196df1b865a9145d00bb0fc9885bfc6d711aaf500c8deb4864b289d922c8406392c61ca144d6bd28a85e22ec44adea0446b67bf71ca95813ffa2b702a241c31cf4fe5088390eccb7eb8355ee3ad8db957a68fc284da54715fe31dbe49bc43a0bffaafc03a00e9b15fbce429968bcbacedaee0440810399d4cb9ac07bfd072d05c2c42a8b9b", &(0x7f00000007c0)="554773029ed288a919689d54cd1202c118dffa47adf7f70774a368e0492b6302cc68f798d2118d8105937ace6244b0f8153aa532fc9f49af72f93a3db238ef7fc606d7a53e015a364e46f1077e6bd754d298c09f4ed3ce22a19d6905b33f877ac339dee882c37044e31f848b097747074ba2907be7e124dde220c03b0992bd6cc4ca73cd90a6e8f790cfc0832e3803139dab514361a1348f0ef9c44620c34a77c4d3422fd2123d70cfd2f0efb19ef223fa688d8705fb3802", 0x0, 0x3ff}, 0x48) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xdf030000, 0x0) 20:46:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x22, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000fffffff008001b"], 0x30}}, 0x0) [ 609.785826][T20247] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 609.811697][T20247] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe4ffffff, 0x0) 20:46:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x2002021, 0x0) 20:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000fffffffe08001b"], 0x30}}, 0x0) 20:46:51 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x24, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:51 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe6260000, 0x0) 20:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000007fffffff08001b"], 0x30}}, 0x0) 20:46:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) mount$fuse(0x0, 0x0, &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f6465463a5991fa58000030303030303041f1439222730d5690353255710000000000000000000000002c9b7b58e6eef1748ee7992cd785f4b8d868bfd7f2c8ef4c7015cb630b94725fbb35f3915ac1a26b868d4ab52ab33cacf297f5c1982f3ae33dcab2360936a0e6202b6354f7aff3dee98c564647e8fcf113b4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB=',\x00']) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000380)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r0}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xd00}}, {@allow_other='allow_other'}], [{@subj_user={'subj_user', 0x3d, '\'::\''}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '%\xb9!'}}, {@context={'context', 0x3d, 'system_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@dont_measure='dont_measure'}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '{/$[+*\x91-{'}}, {@fowner_gt={'fowner>'}}]}}) 20:46:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000009effffff08001b"], 0x30}}, 0x0) [ 610.505975][ T163] device bridge_slave_1 left promiscuous mode [ 610.512173][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.519601][ T163] device bridge_slave_0 left promiscuous mode [ 610.525796][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.506361][T20300] cgroup1: Unknown subsys name 'perf_event' [ 611.512427][T20300] cgroup1: Unknown subsys name 'net_cls' [ 611.546739][T20300] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.553777][T20300] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.561221][T20300] device bridge_slave_0 entered promiscuous mode [ 611.568062][T20300] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.575093][T20300] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.582480][T20300] device bridge_slave_1 entered promiscuous mode [ 611.615907][T20300] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.622938][T20300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.630211][T20300] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.637240][T20300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.656288][ T9664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.663866][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.672277][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.685543][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.693612][T17811] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.700636][T17811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.707981][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.716788][T17811] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.723787][T17811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.745184][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 611.753571][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 611.762459][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 611.770968][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.778944][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.790033][ T9664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 611.799746][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:46:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe7260000, 0x0) 20:46:53 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000c3ffffff08001b"], 0x30}}, 0x0) 20:46:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) r0 = dup(0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0xffffffffffffff0b, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x0, 0x2, 0x4e23}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000001}, 0x14880) 20:46:53 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000003c0)=0x5000, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="20c181206b9ef67469"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x2002021, 0x0) [ 611.828409][T20305] new mount options do not match the existing superblock, will be ignored [ 611.856472][T20305] new mount options do not match the existing superblock, will be ignored 20:46:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000eaffffff08001b"], 0x30}}, 0x0) 20:46:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe8030000, 0x0) 20:46:53 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="99fe204e49c53b3626ea7b833a52e3a2a140984ade4bedfa295016f461b975040d75fc"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:53 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x8002, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x44014}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x100, 0x70bd25, 0x25dfdbfe, {0x2, 0x0, 0x3, 0x0, 0x20}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x3000000}}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x40001) 20:46:53 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x30, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 611.887626][T20316] __nla_validate_parse: 6 callbacks suppressed [ 611.887632][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf0ffffff, 0x0) 20:46:53 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000600000005001901040000800800a1000900000008009f0007000000051d90012d000000050018013b01000008002600d5160000"], 0x60}}, 0xc000) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf4ffffff, 0x0) [ 611.949256][T20324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 611.953127][T20329] incfs: Error accessing: ./file0. 20:46:53 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, 0x0, 0x2002021, 0x0) 20:46:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r1], 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x28, r0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x10001, 0x6b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20040000) 20:46:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000efffffff08001b"], 0x30}}, 0x0) 20:46:53 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf5040000, 0x0) 20:46:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000f0ffffff08001b"], 0x30}}, 0x0) 20:46:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf6ffffff, 0x0) 20:46:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x7, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffb57}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8008101) [ 612.071849][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 612.132382][T20359] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 612.161335][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:53 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf9fdffff, 0x0) 20:46:53 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file1\x00', 0xffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x39dc0d68eaa37947) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0xe1b) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x11, "26b1f616004d95d14e2bf78d4e44"}, 0x10, 0x2) [ 612.176829][T20359] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 612.705649][T13002] device bridge_slave_1 left promiscuous mode [ 612.711929][T13002] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.719366][T13002] device bridge_slave_0 left promiscuous mode [ 612.725609][T13002] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.692535][T20381] cgroup1: Unknown subsys name 'perf_event' [ 613.698843][T20381] cgroup1: Unknown subsys name 'net_cls' [ 613.732925][T20381] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.740119][T20381] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.747772][T20381] device bridge_slave_0 entered promiscuous mode [ 613.755462][T20381] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.762458][T20381] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.769952][T20381] device bridge_slave_1 entered promiscuous mode [ 613.802978][T20381] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.810019][T20381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.817329][T20381] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.824330][T20381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.843678][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 613.851811][T17825] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.859357][T17825] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.869241][ T9664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 613.877501][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.884494][ T9664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.906146][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 613.914389][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 613.922661][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.931786][T17825] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.938833][T17825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.946173][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.954048][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.967592][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 613.982024][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 613.990494][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:46:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa1, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xfeffffff, 0x0) 20:46:55 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 20:46:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x840fb92fac14f48e, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x240802, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20108011}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9862}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40080) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:46:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000feffffff08001b"], 0x30}}, 0x0) [ 614.018218][T20387] new mount options do not match the existing superblock, will be ignored [ 614.046569][T20387] new mount options do not match the existing superblock, will be ignored 20:46:55 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYBLOB, @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)={0x148, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfa, 0x7c}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "56efd00dfff39c93fd9f"}, @NL80211_ATTR_FILS_ERP_RRK={0x74, 0xfc, "ed62ce9dac30464b4ec8ad86359c606fec11dd1bdbe48cf57ae1b2908d0789ec42225c387b8baba275a983fac67ec558cd6f7bf2358847941f4f3e44a3de7e9258740d7bdf7a96b447fd27aca727bd22a424e3d6823b1834e62b7b90bf5bdda4b3df430eef2160d655aa8c24a0b15567"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "7a1b3e"}, @NL80211_ATTR_FILS_ERP_RRK={0x33, 0xfc, "ce2bd200e7ff60e9ca5c8450d439f07dac41779c82bf3753197368b7aee09f093a075db97babfc60b2d9ff1587093c"}, @NL80211_ATTR_FILS_ERP_REALM={0x2b, 0xfa, "db9448e1fca306e8720c63c42c9aedabaede41b0f5fef1eaa13a1897c6b9760ea742bd0d282acf"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "18d275005bc5a25ebb0003f7001af34377465aaa1651ee02"}]]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESHEX, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYRESHEX], 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000900001b"], 0x30}}, 0x0) 20:46:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xff010000, 0x0) 20:46:55 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:55 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:55 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 614.081758][T20399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:55 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xff030000, 0x0) 20:46:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c00001b"], 0x30}}, 0x0) [ 614.133061][T20405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 614.159465][T20409] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x280000, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:46:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 20:46:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xff0f0000, 0x0) 20:46:56 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 614.183958][T20409] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 614.207844][T20415] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:46:56 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffff1f00, 0x0) 20:46:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000001001b"], 0x30}}, 0x0) 20:46:56 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2880, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:46:56 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfc, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 614.316642][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 615.135021][T13002] device bridge_slave_1 left promiscuous mode [ 615.141250][T13002] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.148649][T13002] device bridge_slave_0 left promiscuous mode [ 615.154965][T13002] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.784132][T20449] cgroup1: Unknown subsys name 'perf_event' [ 615.790448][T20449] cgroup1: Unknown subsys name 'net_cls' [ 615.824469][T20449] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.831534][T20449] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.839288][T20449] device bridge_slave_0 entered promiscuous mode [ 615.846309][T20449] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.853376][T20449] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.861390][T20449] device bridge_slave_1 entered promiscuous mode [ 615.894409][T20449] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.901448][T20449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.908704][T20449] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.915735][T20449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.943268][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 615.952093][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.959969][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.975778][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 615.983887][T17825] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.990906][T17825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.998387][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 616.006543][T17825] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.013533][T17825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.035281][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.043516][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.052364][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 616.060521][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 616.068460][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 616.079931][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 616.089405][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:46:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000002001b"], 0x30}}, 0x0) 20:46:57 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xfffffdf9, 0x0) 20:46:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x300, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:57 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r4, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r2], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x2400c000) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:46:57 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x2000, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:57 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 20:46:57 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffffff7f, 0x0) [ 616.119840][T20455] new mount options do not match the existing superblock, will be ignored [ 616.146745][T20455] new mount options do not match the existing superblock, will be ignored 20:46:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000004001b"], 0x30}}, 0x0) 20:46:58 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="6083", @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000000000000800a100a50d000005001901040000000800a8000008009f0007000000050018012d000000050018013b00000008002600d5160000000000"], 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000002340)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>', r1}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r2}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="50000008ffff", @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:46:58 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x181) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg2\x00'}) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES16=r1, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) [ 616.187316][T20466] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.216334][T20471] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffffff8c, 0x0) 20:46:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c04001b"], 0x30}}, 0x0) [ 616.240043][T20471] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 616.253292][T20474] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 20:46:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x303, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:46:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffffffa1, 0x0) 20:46:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) [ 616.320339][T20482] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 616.390569][T20486] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 616.421688][T20486] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:46:58 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x5, 0x0, 0x0, 0x800085, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='dax\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x82) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x20) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:46:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e04001b"], 0x30}}, 0x0) 20:46:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffffffe4, 0x0) 20:46:58 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3ea, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 616.577740][T20465] incfs: Error accessing: ./file0. 20:46:58 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xfffffff0, 0x0) 20:46:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000002000008001b"], 0x30}}, 0x0) [ 616.620984][T20503] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 616.687737][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 616.785152][ T163] device bridge_slave_1 left promiscuous mode [ 616.792529][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.800786][ T163] device bridge_slave_0 left promiscuous mode [ 616.807496][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.987085][T20515] cgroup1: Unknown subsys name 'perf_event' [ 617.993514][T20515] cgroup1: Unknown subsys name 'net_cls' [ 618.028480][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.035534][T20515] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.042952][T20515] device bridge_slave_0 entered promiscuous mode [ 618.049926][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.056966][T20515] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.064230][T20515] device bridge_slave_1 entered promiscuous mode [ 618.097865][T20515] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.104902][T20515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.112232][T20515] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.119249][T20515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.138646][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.146369][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.153465][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.175301][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 618.183500][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.192210][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.199256][ T9670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.207435][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.215652][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.222653][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.230031][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.238016][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 618.264419][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.272749][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.281265][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 618.289822][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.319097][T20521] new mount options do not match the existing superblock, will be ignored [ 618.380140][T20522] new mount options do not match the existing superblock, will be ignored 20:47:00 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f8, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:00 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x90489, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xfffffff4, 0x0) 20:47:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000003000008001b"], 0x30}}, 0x0) 20:47:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:00 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x381bd9f2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000540)=ANY=[@ANYBLOB="d036a134b1210ececcb6785b4fc28ace341bb5443bc6189247fd58659460c1851080464dfc79ae5f16ad0fb6e91dc7654c904415f79bceae5853e9d5e48a5555c324cacef7e516a50116b332984c9aaea0060536c43a08779dfcee2ce03f11bc61ea839f972c686450d7465218416d242e9a6d3b5da6fb"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x38, 0x3e9, 0x100, 0x70bd2b, 0x25dfdbfd, {0x11, 0x0, 0x1, 0x0, 0x6, 0x2, 0x60, 0x4, 0x0, 0x3}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000406}, 0x0) 20:47:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xfffffff6, 0x0) 20:47:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000004000008001b"], 0x30}}, 0x0) 20:47:00 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x80000000, 0x80, 0x7f}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000080)={0x6, 0x80}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:00 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x408, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:00 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x0, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0x0, 'wlan1\x00', 'vlan0\x00', {}, {0xff}, 0x2f, 0x3, 0x1}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158, 'hashlimit\x00'}, {'macvlan1\x00', {0x2, 0x6, 0x22, 0xfffffeff, 0xffff, 0x40, 0x2, 0xfffff7e5, 0x40}, {0x6}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x1, 0x3, 0x0, 0x0, 0x2], 0x3, 0x5}, {0x1, [0x4, 0x4, 0x1, 0x0, 0x1, 0x2], 0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000005000008001b"], 0x30}}, 0x0) 20:47:00 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000300)) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xfffffffe, 0x0) [ 618.481663][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.518881][T20540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000006000008001b"], 0x30}}, 0x0) 20:47:00 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xedc000000000, 0x0) [ 618.566420][T20547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.602926][T20550] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 618.630854][T20559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 618.656045][T20550] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 619.074623][ T163] device bridge_slave_1 left promiscuous mode [ 619.081269][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.089105][ T163] device bridge_slave_0 left promiscuous mode [ 619.095505][ T163] bridge0: port 1(bridge_slave_0) entered disabled state 20:47:01 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:01 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5d}}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x10040) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000040)=0x7fffffff) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x4000000000000, 0x0) 20:47:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000007000008001b"], 0x30}}, 0x0) 20:47:01 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x480, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:01 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x10000000000000, 0x0) 20:47:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000008000008001b"], 0x30}}, 0x0) 20:47:01 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x3, 0x202000) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 619.325344][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 619.342234][T20571] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 619.356976][T20571] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 619.403543][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.110218][T20584] cgroup1: Unknown subsys name 'perf_event' [ 620.116531][T20584] cgroup1: Unknown subsys name 'net_cls' [ 620.150720][T20584] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.157838][T20584] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.165292][T20584] device bridge_slave_0 entered promiscuous mode [ 620.172070][T20584] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.179225][T20584] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.186579][T20584] device bridge_slave_1 entered promiscuous mode [ 620.220560][T20584] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.228277][T20584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.235649][T20584] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.242650][T20584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.262476][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.270564][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.278603][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.287932][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 620.296242][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.303237][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.314533][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 620.322618][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.329642][ T9669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.339330][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 620.349076][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.362772][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.373609][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.391898][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.400514][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.409611][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 20:47:02 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x14, 0x0, 0x811, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x0, 0x118, 0x2c}]}, 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) dup(r1) rt_sigqueueinfo(0xffffffffffffffff, 0x9, &(0x7f0000000540)={0x3, 0x8f, 0xffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000007c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYRES16], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x3, 0x202000) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4f5, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000009000008001b"], 0x30}}, 0x0) 20:47:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x20000000000000, 0x0) 20:47:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x5000000, 0x0) 20:47:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x3, 0x202000) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x500, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 620.436309][T20590] new mount options do not match the existing superblock, will be ignored [ 620.463666][T20591] new mount options do not match the existing superblock, will be ignored 20:47:02 executing program 2: ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x0, 0x6, 0x1, 0x5}, 0x6, 0xffffffff, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x9, 0x6, 0xe70}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r1], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x44, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x27}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x81}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 20:47:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x3, 0x202000) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:02 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)='fuse\x00', 0x40038, &(0x7f00000006c0)=ANY=[@ANYBLOB="43d6e5e236b9bcb076646f07992e13d49fd63e1e466bbe8c9184594d753787416e4b67ff062b4b94595e0d37a5340af76fb067e702fee09b5e71a75056c6b9d9b0bbaa52cca2eb92fbde6bddf47ed60c71c8bf4b943f3c6e09ebc758032a48f9f5ad8c206553e2", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=unconfined_u,\x00']) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a00080003002ba00103000000080080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000540)=ANY=[@ANYBLOB="46dde584c1818fc49fab61030f33c5c04b78c21d5f493ecab5a491cb48993493e60b864aa3e30e809fe5c96f95e8e6dfec4b213bed8cc295e414a7fd2a4b88a80d0f26ea01442ce295c924349b45113e32026e2f5a185da1b48a529e954756fc2e6b1f52bf6e13fe830001f2f2cc0ba86d973793e7be46a93e32d987b6f4fc110b6ddd1aef2561021476c2ae7072c3282703579a0fbe56287836fd9029540f841bc5dc4de45429018a9675057dc0280180"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xc0000000000000, 0x0) 20:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000000a000008001b"], 0x30}}, 0x0) [ 620.516849][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:02 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000300)={0xc98, 0x25af}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES64], 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000800)=ANY=[@ANYBLOB="f2014262643d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=unconfined_u,\x00', @ANYBLOB="be24ff903d91e6caad70488608f1a17a1c0433495da2fc5e03b026030b5684532bd0c34c275425752bcb7dd30d9f627a19ed85dd619f568ac26150780c60b5a838bac8da8a8db4b27493abf291095e74215f371d9b769718b0fa1814ce8b1905467dcf2839cb202c1744ca1c50e566d182c2f5293e4257acabe5ab06197e0512e46999d424270935f613a5b10dfe5a4faa2f00905bc8e4d4b817cd54adec69108af656759d73d340d427176f70b4dd6fa499", @ANYRES32]) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a005daedabcda39588000bb6251b44dadda3d04794f2375d3fde926779abb1e6ebb4658117dcc077644214e968234f8078b393a924bca00fa1f5da3fb35dbccb080956482557960323724dadb2aafbd9933a92f9dd432b828d3cdb55cb03486c2d396f78f9f5b38a162f3d2352e4385", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="70fe9056777e0d6e2c8bb58afdee2cab9b94b0d1786bd74ab64af983ddb2324abec3c444fb57e882e5e92d0f5ab5d849ef7e54da58af8e8ad3d3a3abbc8a33e93d12ab589cdbe7d55434286892c38046bf1589add5f7f18acd4e2b038df16f7e4286f3ec0036d29d81290fc003c6a5884b95dfc64e57d00b7d592e6fe8d32f7c222bb229ee2a87b37ada14896834fac17a775b4345c2d063dc44c6e32f69cd63f5b8cee415a8d7299d44cc128d2b47604c936114bc18a8f53f3e45b84ea5868c"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xff070000000000, 0x0) 20:47:02 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x9, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x2, 0x2) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x201, 0x0, 0x0, {{}, {}, {0x3, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbf9, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) setxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:systemd_unit_file_t:s0\x00', 0x29, 0x37e77368227a875b) open(&(0x7f0000000080)='./file0\x00', 0x444040, 0x22) 20:47:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x3, 0x202000) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 620.587100][T20616] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 620.611949][T20616] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000000b000008001b"], 0x30}}, 0x0) 20:47:02 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x600, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 620.632553][T20617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000000c000008001b"], 0x30}}, 0x0) 20:47:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x100000000000000, 0x0) 20:47:02 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080)='/dev/usb/hiddev#\x00', 0x3, 0x202000) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 620.674117][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:02 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:02 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x200000000000000, 0x0) [ 620.729688][T20633] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000000d000008001b"], 0x30}}, 0x0) [ 620.777459][T20640] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 620.796958][T20640] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 621.164352][ T163] device bridge_slave_1 left promiscuous mode [ 621.170507][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.188064][ T163] device bridge_slave_0 left promiscuous mode [ 621.204191][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.270754][T20652] cgroup1: Unknown subsys name 'perf_event' [ 622.276913][T20652] cgroup1: Unknown subsys name 'net_cls' [ 622.312120][T20652] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.319300][T20652] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.327280][T20652] device bridge_slave_0 entered promiscuous mode [ 622.334772][T20652] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.341908][T20652] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.349629][T20652] device bridge_slave_1 entered promiscuous mode [ 622.383440][T20652] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.390527][T20652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.397788][T20652] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.404870][T20652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.424512][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.432185][ T9670] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.439762][ T9670] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.464594][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 622.472990][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 622.481290][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.489460][ T9670] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.496501][ T9670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.503817][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.512000][ T9670] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.519055][ T9670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.526388][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.534399][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.545527][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 622.561515][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 622.571218][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.597090][T20657] new mount options do not match the existing superblock, will be ignored 20:47:04 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r0, &(0x7f0000000300)={0x7, 0x1b, 0x1}, 0x7) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c4b726f75705f69643dd7c2414f7c3358263895c973da79d551e675744f68046eb03df8d7facab0efc51add68e6748daece341da6e0d478b78788bfbff7e106aef4d082d6a89b588c375c205a29403fe73f37b67111ad1625a27445adcf8c8b4f001f9b24bbe604bcb4", @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=unconfined_u,\x00']) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x227000000000000, 0x0) 20:47:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x700, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000000e000008001b"], 0x30}}, 0x0) 20:47:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) [ 622.669028][T20659] new mount options do not match the existing superblock, will be ignored 20:47:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x300000000000000, 0x0) 20:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000010000008001b"], 0x30}}, 0x0) 20:47:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x400000000000000, 0x0) 20:47:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000011000008001b"], 0x30}}, 0x0) 20:47:04 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000012000008001b"], 0x30}}, 0x0) 20:47:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x500000000000000, 0x0) 20:47:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x804, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:04 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) [ 622.775915][T20677] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 622.790742][T20677] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:04 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000025000008001b"], 0x30}}, 0x0) 20:47:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x600000000000000, 0x0) 20:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000048000008001b"], 0x30}}, 0x0) 20:47:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x700000000000000, 0x0) [ 622.885484][T20696] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 622.919178][T20696] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000004c000008001b"], 0x30}}, 0x0) 20:47:04 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x900, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:04 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:04 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x800000000000000, 0x0) [ 623.096035][T20726] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 623.127980][T20726] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 623.324160][ T163] device bridge_slave_1 left promiscuous mode [ 623.330332][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.348094][ T163] device bridge_slave_0 left promiscuous mode [ 623.358005][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.515810][T20730] cgroup1: Unknown subsys name 'perf_event' [ 624.521921][T20730] cgroup1: Unknown subsys name 'net_cls' [ 624.557294][T20730] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.564683][T20730] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.571983][T20730] device bridge_slave_0 entered promiscuous mode [ 624.579325][T20730] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.586640][T20730] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.594281][T20730] device bridge_slave_1 entered promiscuous mode [ 624.629328][T20730] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.636396][T20730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.643655][T20730] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.650811][T20730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.669754][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.677428][T17825] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.685099][T17825] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.705059][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.713154][T17825] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.720197][T17825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.728332][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.736540][T17825] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.743539][T17825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.750912][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 624.758870][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 624.770264][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 624.778699][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 624.793817][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 624.801622][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 624.811092][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.819266][T17825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.833776][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 624.841978][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 624.850500][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 624.858992][ T67] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:47:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000060000008001b"], 0x30}}, 0x0) 20:47:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x900000000000000, 0x0) 20:47:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:06 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB="3ca031124af0483c4f604c50fe8f71e4aed2371a38093a4ed6c585bed8435798ff854687c4c0438bfd6eb123e8202480750457958b4f506668f5269e62bdf33dcef708c6ea07c63962f0ab71a062d5549d633765f959"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) inotify_init1(0x0) 20:47:06 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 624.885088][T20736] new mount options do not match the existing superblock, will be ignored [ 624.912594][T20737] new mount options do not match the existing superblock, will be ignored 20:47:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xa00000000000000, 0x0) 20:47:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000068000008001b"], 0x30}}, 0x0) 20:47:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 624.960799][T20747] __nla_validate_parse: 8 callbacks suppressed [ 624.960804][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000006c000008001b"], 0x30}}, 0x0) 20:47:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xb00000000000000, 0x0) 20:47:06 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xc00000000000000, 0x0) 20:47:06 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="83000000", @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) [ 624.997642][T20752] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 625.011012][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 625.021078][T20752] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 625.042906][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:06 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000074000008001b"], 0x30}}, 0x0) 20:47:06 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0xfc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd0c}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'geneve1\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:06 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:06 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xd00000000000000, 0x0) [ 625.120497][T20771] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 625.149765][T20771] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000007a000008001b"], 0x30}}, 0x0) 20:47:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe00000000000000, 0x0) 20:47:07 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:07 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 625.171151][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:07 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1000000000000000, 0x0) 20:47:07 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000072010008001b"], 0x30}}, 0x0) [ 625.228824][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 625.286236][T20799] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 625.326519][T20799] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 625.409033][T20805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 625.887487][ T163] device bridge_slave_1 left promiscuous mode [ 625.893817][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.901154][ T163] device bridge_slave_0 left promiscuous mode [ 625.907478][ T163] bridge0: port 1(bridge_slave_0) entered disabled state 20:47:07 executing program 2: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:07 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 626.197278][T20812] new mount options do not match the existing superblock, will be ignored [ 626.822829][T20814] cgroup1: Unknown subsys name 'perf_event' [ 626.830471][T20814] cgroup1: Unknown subsys name 'net_cls' [ 626.879292][T20814] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.886339][T20814] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.894138][T20814] device bridge_slave_0 entered promiscuous mode [ 626.909038][T20814] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.916118][T20814] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.923398][T20814] device bridge_slave_1 entered promiscuous mode [ 626.959797][T20814] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.966997][T20814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.974266][T20814] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.981268][T20814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.013712][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 627.021244][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.029908][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.038687][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 627.047039][T17811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 627.068957][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.079842][T17822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.092870][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.114500][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.122951][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.153146][T20819] new mount options do not match the existing superblock, will be ignored 20:47:08 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) process_vm_writev(0x0, &(0x7f0000000300)=[{&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/69, 0x45}, {&(0x7f00000007c0)=""/87, 0x57}, {&(0x7f0000000840)=""/92, 0x5c}], 0x3, 0x0) setresuid(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:08 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1100000000000000, 0x0) 20:47:08 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000030008001b"], 0x30}}, 0x0) 20:47:08 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:08 executing program 2: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000000000000800a100a50d000005001901040000000800a10095a8000008009f0007000000050018012d000000050018013b00000008002600d5160000a00e5d397605bfe2cdcf0a0a9e287d2c168421412126140270f5b6b7be3d201e5c739cf80b42d96bc60c24854ad131b41b6ff9c266c77092b30f2f7452016555c82cc67a8eb293e92b9f92e61ffa8c1710d4d9db41274438d7b642f9ab8c954c0e9ff86c64a5538f4cfd9d11053024a277596aef48a60914fa816aa7c2f4278e9090edd1fbf5a8ae3627cabf5803bf0f79a1437daa801183901c707caed3fe04507cd390c4283b221622df2636d94ad5af7ca686e7"], 0x60}}, 0x0) dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1200000000000000, 0x0) [ 627.177195][T20821] new mount options do not match the existing superblock, will be ignored [ 627.201458][ T163] device bridge_slave_1 left promiscuous mode [ 627.213146][ T163] bridge0: port 2(bridge_slave_1) entered disabled state 20:47:09 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1300000000000000, 0x0) 20:47:09 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1400000000000000, 0x0) [ 627.238201][ T163] device bridge_slave_0 left promiscuous mode [ 627.249545][ T163] bridge0: port 1(bridge_slave_0) entered disabled state 20:47:09 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:09 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300cdb4c0294e4ef78a946f1e33e768bbfdcdfeae7ae3bd8a801eede88a64923c7e557a5ec1ff72a0eec442f96dbc646a802868bffd4fbb22fd32869559b0db5cb5b866dae98913f90f146b19c435c0609c7aa9a6ed45478ca3d2321948290f4ca95ad317556a9d8f69dbceaf21ab3d7136c28399c028ac", @ANYRES32=0x0, @ANYBLOB="0c00990006000000000000000800a100a50d000005001901040000000800a10095a8000008009f0007000000050018012d000000050018013b00000008002600d5160000"], 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='rootfs\x00', 0x920020, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB="9adf10008e8880a61037ab3d749a617904540fb884c588e90df2c5b0cc148add35fb913ed048ea230928990ffdb18ffbe59afd50de6c7fd1d29a61c2210d286d73ba318a3bb9838b79c651141607c50ea82266edaea6b64d6a95f41177b377c71b2d714a0c156a63bd507d3b30d8b7ed38e6d483fa8dd50066e9fff253eef3ba26"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="0dbe4d75fcb1cf676833e2f10bf4da78a89bfa89999e81517735a5053a2f0ea4171d3611d2c67f6dcfc8c4e502e06868cd9d2d6d79e543220c4442759573857cc6659938848fd50633973f3107f7bcf3260ab6d481e7433e2181cec5597c4dc7a64787c4248544"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f00000008c0)='0-*\\%{.:$$$)},{\'&}\x06\x00\xbeLX\xeb\xed\x95\x1d\x14X*\n\x87\xc7\x8c\xa0}\xae\xce\xafd!\xbd\r\x8e`L\x05S>13c\xd1\x06\xb1EY\xc9\xdc\xac\xf1\xb33\x8d\xb4\xd5Y\x91\x11\xacs\xf4\xeb\x0f\xff:\xbf&\xfd\x8at\x1c\xbb\x9ag\xfdNbe\x9du\r4Le\xb0\x8c\xcc\x84\xe2\x8b\xf0U\x909~\xccW\xb3\x12\x1b\x82\x86\v\xdf\xae\x96\xea\xb1\xcadq\x03F\xf6\xb5\xfa\xc0\x0f\x9e\xf2\x1f\xddZ\xa4\xfdL\xbc\xa2E\xb9\"\xe2t\xfe\xcd=\x12\xad\x1e\xa8\xc1\xad~\x82\xb1\x15\x96\xb0\xcb\xdc\xa2\xa9q\x82\xf3\x9d\x962p,\xa2\xcc\x98\x91\x1e\xd4\xdf\x06\xa1\b\x16\xc9iyKr\xb4\xae\xed\x9dE\xaa\x8a\x8a5\x82\xc3\t+e\xb9\v\xffh\xdc\xbcC\x01j+rt\xceP\x94\xc1]\x1f\x98\xf8\x1f\xf5\x80F\xdf\x1e\xe2yQ\x88\xbf\xc5\x15.\xd8Hr\x9d\xf1\xe4U\x8d\x8b\x88Bb\xca\x8cA\x05n\xad\a\x9ct\x8f#\x8d\x7f\xf3\xca\xfd\x95\xab\x9c\xd8\xd0\x1b\xbfr\xc9\x15\x18\x0fG\xb4\xb81v\x92T\xe95\x13E\x03\xe1\xffw\\\xe3\xe6A\xeb\b\xad\xf4\x89\xa2A\x95d\nC\xb5\x1b\xd5\r\x04\xe9\xc1\x8e6\xa5\xc0\xfb\xdaR\x89:k9\x98\xaf$\x83\xaa\x9ez\xa7\x06\x96;\xc7\x86\bn\x05R\xa8\xfd\x7f\x85\x91fE5\x82p4\xb2\x95\xfc\x01\x80\xa5\xdc\xdc%{\r\x12\xe2l\v\x1b\xb3]\x83\x9b\xab!9}\x95Y2\xf1\b\xb6\xf8\xf9[\x12\x12\x14\b\xa7\xb4\x01lul<1\xe4\xf1\xa0\xb4>:P\x17R\xcc\t0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000050008001b"], 0x30}}, 0x0) 20:47:09 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1700000000000000, 0x0) [ 627.448634][T20838] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 627.518770][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 627.528926][T20851] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 627.560740][T20851] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 628.864467][T20859] cgroup1: Unknown subsys name 'perf_event' [ 628.870541][T20859] cgroup1: Unknown subsys name 'net_cls' [ 628.907080][T20859] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.914241][T20859] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.921506][T20859] device bridge_slave_0 entered promiscuous mode [ 628.928741][T20859] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.935802][T20859] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.943181][T20859] device bridge_slave_1 entered promiscuous mode [ 628.952940][ T163] device bridge_slave_1 left promiscuous mode [ 628.959257][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.966676][ T163] device bridge_slave_0 left promiscuous mode [ 628.972751][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.103028][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 629.110425][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.135763][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.144191][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.151971][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 629.161245][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.169399][T17803] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.176440][T17803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.183820][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 629.192054][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.200213][T17803] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.207243][T17803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.214547][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.222406][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.230414][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 629.241205][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 20:47:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1800000000000000, 0x0) 20:47:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000060008001b"], 0x30}}, 0x0) 20:47:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 629.256354][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.266445][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.293284][T20864] new mount options do not match the existing superblock, will be ignored 20:47:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x2000000000000000, 0x0) 20:47:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) [ 629.345021][T20870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 629.390907][T20875] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 629.407168][T20875] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 629.449401][T20879] cgroup1: Unknown subsys name 'perf_event' [ 629.455577][T20879] cgroup1: Unknown subsys name 'net_cls' [ 629.489660][T20879] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.496722][T20879] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.504423][T20879] device bridge_slave_0 entered promiscuous mode [ 629.511161][T20879] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.518607][T20879] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.526275][T20879] device bridge_slave_1 entered promiscuous mode [ 629.560460][T20879] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.567496][T20879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.574880][T20879] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.581902][T20879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.607435][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.616346][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.624275][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.644079][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.652297][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.659319][T17837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.666652][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.674842][T17837] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.681909][T17837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.689296][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.697306][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.706819][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.724196][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.732019][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 629.742975][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 629.753639][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:47:11 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000940)=ANY=[@ANYBLOB="000000f9520254d4c424fba59dfe42a3f346e2baabcf15d4347d019a6219c257c93845c4c681cb43d472c07fa0616adb66d0109f35205f066a4a015ded72c1af67d6b36e21c83a565a8fea6788dc8c68c0c8801bcfdaa722137ef53dab5951e58cb4128658db0a3e118fe4eec58254cbf25899a0ee40ecf15d441ed123a5dc9d62cf137fde7895a40fe07f9488c477667da0d18334fb4ca762e0df059480f2c7eefb412b57cf5beefffba8119aedf0c88948c8672885377ef0451d393601562ac71f8fbf8da3298a9e34ff9b37bdee8da45d0161dac8eb776b4d646f425c1bf3552113d8d921154489c2e7b808d65c6fbe3e86b8b5c4afe4d84e59f5c0acedb51325ab1a7b397f4ef05f922a43ce55035d47e35ded4aa0a27e7e5348973fe1c3a53d3a8c2a8460c752b091bb78fed930e4a7c255af9a9d1640b3cacf2db74706aaaf33e78e8cee46927b1a341ee735b279", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=unconfined_u,\x00']) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x2010000000000000, 0x0) 20:47:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000070008001b"], 0x30}}, 0x0) 20:47:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1020, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x2400000000000000, 0x0) 20:47:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x3f00000000000000, 0x0) 20:47:11 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000090008001b"], 0x30}}, 0x0) 20:47:11 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1100, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:11 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x4000000000000000, 0x0) [ 629.844281][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000a0008001b"], 0x30}}, 0x0) 20:47:11 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x811, 0x70bd67, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x58}}, 0x4000881) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:11 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 629.976545][T20916] __nla_validate_parse: 1 callbacks suppressed [ 629.976551][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 630.223972][ T163] device bridge_slave_1 left promiscuous mode [ 630.230136][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.253543][ T163] device bridge_slave_0 left promiscuous mode [ 630.259683][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.420089][T20919] cgroup1: Unknown subsys name 'perf_event' [ 631.427274][T20919] cgroup1: Unknown subsys name 'net_cls' [ 631.461407][T20919] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.468620][T20919] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.476280][T20919] device bridge_slave_0 entered promiscuous mode [ 631.484227][T20919] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.491279][T20919] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.498823][T20919] device bridge_slave_1 entered promiscuous mode [ 631.534180][T20919] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.541321][T20919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.548620][T20919] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.555651][T20919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.574821][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 631.582434][T17837] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.589776][T17837] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.603500][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 631.611741][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.618767][ T9662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.626112][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 631.634321][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.641332][ T9662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.652171][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 631.661134][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 631.675391][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 631.694012][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.701928][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.714986][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 631.723771][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.763659][ T163] device bridge_slave_1 left promiscuous mode [ 631.769826][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.777751][ T163] device bridge_slave_0 left promiscuous mode [ 631.784186][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.838383][T20928] cgroup1: Unknown subsys name 'perf_event' [ 631.848154][T20928] cgroup1: Unknown subsys name 'net_cls' [ 631.946505][T20928] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.953876][T20928] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.961210][T20928] device bridge_slave_0 entered promiscuous mode [ 631.968275][T20928] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.975431][T20928] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.982725][T20928] device bridge_slave_1 entered promiscuous mode [ 632.018510][T20928] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.025556][T20928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.032793][T20928] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.039809][T20928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.047841][T17837] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.055078][T17837] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.074745][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.082301][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.093007][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.101277][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.109545][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.116579][T17837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.123913][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.132238][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.140612][T17837] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.147664][T17837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.163110][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.171070][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.179169][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 632.187224][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.199233][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.207673][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.223458][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 632.231235][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 632.239926][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 632.248664][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 632.259885][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.268191][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.279046][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.287475][ T9670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.316766][T20938] new mount options do not match the existing superblock, will be ignored [ 632.349822][T20938] new mount options do not match the existing superblock, will be ignored 20:47:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x4100000000000000, 0x0) 20:47:14 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1200, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(0x0, 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000b0008001b"], 0x30}}, 0x0) 20:47:14 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) inotify_init1(0x0) 20:47:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(0x0, 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x8004000000000000, 0x0) 20:47:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(0x0, 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000c0008001b"], 0x30}}, 0x0) 20:47:14 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1300, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 632.626480][T20945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 632.691476][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:14 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x8cffffff00000000, 0x0) 20:47:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000d0008001b"], 0x30}}, 0x0) 20:47:14 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:14 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1400, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 632.973978][T20980] incfs: Backing dir is not set, filesystem can't be mounted. [ 632.983705][T20981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 633.020464][ T163] device bridge_slave_1 left promiscuous mode [ 633.028187][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.043332][ T163] device bridge_slave_0 left promiscuous mode [ 633.049470][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.320597][T20993] cgroup1: Unknown subsys name 'perf_event' [ 634.326805][T20993] cgroup1: Unknown subsys name 'net_cls' [ 634.361060][T20993] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.368123][T20993] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.375652][T20993] device bridge_slave_0 entered promiscuous mode [ 634.382412][T20993] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.389447][T20993] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.396804][T20993] device bridge_slave_1 entered promiscuous mode [ 634.429798][T20993] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.436824][T20993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.444087][T20993] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.451094][T20993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.470610][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.477787][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.486514][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 634.531869][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 634.553895][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 634.562153][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.570584][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.577626][ T9669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.585302][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.593503][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.600503][ T9669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.607835][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.615866][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.626644][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 634.643494][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 634.664530][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 634.673262][T17803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 634.700969][T20999] new mount options do not match the existing superblock, will be ignored 20:47:16 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x800) inotify_init1(0x0) 20:47:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xa1ffffff00000000, 0x0) 20:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000e0008001b"], 0x30}}, 0x0) 20:47:16 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:16 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) [ 634.727366][T20999] new mount options do not match the existing superblock, will be ignored 20:47:16 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, 0x0, 0x911, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xffffffffffffffc6, 0x99, {0x6}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000540)={0x8d, 0x29, 0x2, {0xdfa, [{{0x4, 0x3, 0x1}, 0x1, 0x0, 0x7, './file0'}, {{0x1, 0x2, 0x6}, 0x29c, 0x0, 0xd, './file0/file0'}, {{0x1, 0x1, 0x5}, 0x80000000, 0xf8, 0x7, './file0'}, {{0x2, 0x3, 0x5}, 0x100000001, 0x1f, 0x7, './file0'}]}}, 0x8d) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="5000000010006d3c7a65399863b8152ec8c897c7427ad44216221a010400"/41, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000110008001b"], 0x30}}, 0x0) 20:47:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xa1ffffffffffffff, 0x0) 20:47:16 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2010, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:16 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000003c0), &(0x7f0000000540)=0x4) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1300000400007f002800128008000000988a000800030101060f0800008000000800afae00"/49, @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000300)='/-*\\%`\x1a:$$$)},{\'&}\x06\x00_P\x1e\x90\xc8\xee2j\r\xbe\xe34\xf4\x14r\xbd\xa2w\x12\x9ca\xf3J\x87_2o\x10\xfd&\t\xf5\xce\x9d\xb7') inotify_init1(0x0) [ 634.761068][T21006] incfs: Backing dir is not set, filesystem can't be mounted. [ 634.761870][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000120008001b"], 0x30}}, 0x0) 20:47:16 executing program 2: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) inotify_init1(0x0) [ 634.827116][T21019] incfs: Backing dir is not set, filesystem can't be mounted. [ 634.839765][T21017] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xbd03000000000000, 0x0) 20:47:16 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2200, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xdf03000000000000, 0x0) 20:47:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000200008001b"], 0x30}}, 0x0) [ 634.906166][T21029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 634.935243][T21033] new mount options do not match the existing superblock, will be ignored 20:47:16 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe4ffffff00000000, 0x0) 20:47:16 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 635.089137][T21046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 635.471481][ T163] device bridge_slave_1 left promiscuous mode [ 635.477782][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.485486][ T163] device bridge_slave_0 left promiscuous mode [ 635.491564][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.499982][T21056] cgroup1: Unknown subsys name 'perf_event' [ 636.506121][T21056] cgroup1: Unknown subsys name 'net_cls' [ 636.545620][T21056] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.552648][T21056] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.560353][T21056] device bridge_slave_0 entered promiscuous mode [ 636.567320][T21056] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.575209][T21056] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.582504][T21056] device bridge_slave_1 entered promiscuous mode [ 636.618811][T21056] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.625848][T21056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.633104][T21056] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.640101][T21056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.659541][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 636.667522][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.675178][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.693500][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 636.701734][T17839] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.708751][T17839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.716156][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 636.724995][T17839] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.732087][T17839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.739512][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 636.747483][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 636.759403][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.779995][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 636.789521][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.798625][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 636.807358][T17839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.835789][T21062] new mount options do not match the existing superblock, will be ignored [ 636.845749][T21062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 636.855523][T21062] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 636.869909][T21063] new mount options do not match the existing superblock, will be ignored 20:47:18 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:18 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe626000000000000, 0x0) 20:47:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2400, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000250008001b"], 0x30}}, 0x0) 20:47:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000007a00000008001b"], 0x30}}, 0x0) 20:47:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 636.878835][T21063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 636.888088][T21063] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 20:47:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x26d0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:18 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe726000000000000, 0x0) 20:47:18 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x2000001) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=unconfined_u,\x00']) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB="ca9db9f3ba7050a49aa9de55abcecfc75d0f577b99f8e2e946f78a067c1815c13af13762ba974e7fcd5daeaabccbe8723ac9a9d5d330b4024602f5ef2e5db2b4e19f15d2c116f8c6af00"/87], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ashmem\x00', 0x600040, 0x0) 20:47:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000400008001b"], 0x30}}, 0x0) 20:47:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 636.942161][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:18 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xe803000000000000, 0x0) 20:47:18 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x26eb, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:18 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]}, 0x60}}, 0x40) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000000000000000000000000000000000e0ff61d1c122d20017db1e295e5fb614927c1f53767fa3daa60482f4d5e12d93bbdc5522c16652cfcd62c5121bc7f1498a71cb5ef587f9eae8a38479ef00000000000000000000000000000037220896fc04de5697e991ad402abfbd811aad7c12ef7b27628d2206e7b381d4c388dd807d5745407e3cfbbe9c0500af5df8557859e4b6583642c08726803f6afde8bbb8020af831e0b856ba0d8ee81cb6b1b42cce8255dae6c61429f26b139fdb000602b884fe46c8639bfec3ee9b588618af7137d1eb9be79559b7441ba5a887ce1704b884aa78d68b4e99fffffffff76a3c606f1ca25425", @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:18 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:18 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf0ffffff00000000, 0x0) [ 637.026119][T21083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 637.083466][ T163] device bridge_slave_1 left promiscuous mode [ 637.090990][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.105782][ T163] device bridge_slave_0 left promiscuous mode [ 637.117506][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.524294][T21099] cgroup1: Unknown subsys name 'perf_event' [ 638.530418][T21099] cgroup1: Unknown subsys name 'net_cls' [ 638.567589][T21099] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.574731][T21099] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.581973][T21099] device bridge_slave_0 entered promiscuous mode [ 638.588926][T21099] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.596168][T21099] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.603611][T21099] device bridge_slave_1 entered promiscuous mode [ 638.638747][T21099] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.645786][T21099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.653039][T21099] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.660098][T21099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.668220][ T163] device bridge_slave_1 left promiscuous mode [ 638.674686][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.681923][ T163] device bridge_slave_0 left promiscuous mode [ 638.688448][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.766447][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 638.774473][ T3050] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.781564][ T3050] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.803145][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.811719][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 638.820135][ T3050] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.827176][ T3050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.835831][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 638.844010][ T3050] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.851012][ T3050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.858347][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 638.866413][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 638.882545][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.891441][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.899555][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.910983][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:47:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000480008001b"], 0x30}}, 0x0) 20:47:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf4ffffff00000000, 0x0) 20:47:20 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(0x0, 0x0) [ 638.951353][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 638.973493][T21107] cgroup1: Unknown subsys name 'perf_event' [ 638.979693][T21107] cgroup1: Unknown subsys name 'net_cls' 20:47:20 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf504000000000000, 0x0) 20:47:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(0x0, 0x0) 20:47:20 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 639.032300][T21118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 639.104245][T21107] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.111867][T21107] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.120238][T21107] device bridge_slave_0 entered promiscuous mode [ 639.128783][T21107] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.136333][T21107] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.143898][T21107] device bridge_slave_1 entered promiscuous mode [ 639.200485][T21107] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.207524][T21107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.214786][T21107] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.221786][T21107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.245524][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.262854][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.270056][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.282292][T10367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.290812][T10367] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.297832][T10367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.306651][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.314967][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.321963][ T9669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.335963][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.343895][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.363315][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.371614][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.382206][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.395366][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.405298][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 639.436863][T21145] new mount options do not match the existing superblock, will be ignored 20:47:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(0x0, 0x0) 20:47:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000004c0008001b"], 0x30}}, 0x0) 20:47:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf6ffffff00000000, 0x0) 20:47:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:21 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001240)={{0x10b, 0x6, 0xff, 0x81, 0x34, 0x74, 0x197, 0x9}, "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", [[], [], []]}, 0x1320) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=0F000000000000000140000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=unconfined_u,\x00']) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRESOCT], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xf9fdffff00000000, 0x0) 20:47:21 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000780)='./file0\x00', r0, &(0x7f00000007c0)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xc0c0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)={0x170, 0x12, &(0x7f0000000380)}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000280)={r1}) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14, 0x69, 0x1, {0x40, 0x0, 0x1}}, 0x14) [ 639.447189][T21145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21145 comm=syz-executor.5 [ 639.464246][T21145] new mount options do not match the existing superblock, will be ignored [ 639.468021][T21146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21146 comm=syz-executor.5 20:47:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000600008001b"], 0x30}}, 0x0) 20:47:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xfeffffff00000000, 0x0) 20:47:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 639.512912][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xff01000000000000, 0x0) 20:47:21 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x68, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x600}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x68}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001240)={{r0}, 0x0, 0x17, @inherit={0x68, &(0x7f0000000640)={0x1, 0x4, 0x200, 0x401, {0x17, 0x3, 0x10000, 0x2, 0x6bb1}, [0x3, 0x7ff, 0x0, 0x100000000]}}, @devid}) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="4b4323b462ed0a6fb3ef22005edc971a6a7858969791cf5cebc7929b4e4968fb8dfe6362c6539afe76ea5a102877dcd0c3c6a15c0b27b847ad10f9d34dc507b376a243"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:21 executing program 1: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYRES32=r0], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000680008001b"], 0x30}}, 0x0) [ 639.613387][T21176] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xff03000000000000, 0x0) 20:47:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000006c0008001b"], 0x30}}, 0x0) 20:47:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xff0f000000000000, 0x0) 20:47:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 639.653891][T21176] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 639.686930][T21175] new mount options do not match the existing superblock, will be ignored 20:47:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000001720008001b"], 0x30}}, 0x0) 20:47:21 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffff1f0000000000, 0x0) 20:47:21 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8004, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 639.957484][T21210] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 639.971840][T21210] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 640.657105][ T163] device bridge_slave_1 left promiscuous mode [ 640.663701][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.671389][ T163] device bridge_slave_0 left promiscuous mode [ 640.678050][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.685669][ T163] device bridge_slave_1 left promiscuous mode [ 640.691764][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.699125][ T163] device bridge_slave_0 left promiscuous mode [ 640.705370][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.351650][T21213] cgroup1: Unknown subsys name 'perf_event' [ 641.357768][T21213] cgroup1: Unknown subsys name 'net_cls' [ 641.391382][T21213] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.398506][T21213] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.405920][T21213] device bridge_slave_0 entered promiscuous mode [ 641.412950][T21213] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.419962][T21213] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.427413][T21213] device bridge_slave_1 entered promiscuous mode [ 641.462048][T21213] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.469101][T21213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.476507][T21213] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.483531][T21213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.502988][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 641.510572][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.519115][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.543043][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.551306][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.559346][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 641.567524][ T9669] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.574541][ T9669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.581901][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 641.590157][ T9669] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.597192][ T9669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.604493][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 641.612453][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 641.623536][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 641.631565][T10368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 641.648349][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 20:47:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffffff7f00000000, 0x0) 20:47:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000740008001b"], 0x30}}, 0x0) 20:47:23 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:23 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000540)=""/167, &(0x7f0000000300)=0xa7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xda5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:23 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa1ff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:23 executing program 2: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) [ 641.656572][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 641.664908][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 641.673297][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 641.698357][T21218] new mount options do not match the existing superblock, will be ignored 20:47:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffffffff00000000, 0x0) [ 641.724428][T21218] new mount options do not match the existing superblock, will be ignored [ 641.763023][T21228] __nla_validate_parse: 4 callbacks suppressed 20:47:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000007a0008001b"], 0x30}}, 0x0) 20:47:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0xffffffffffffffa1, 0x0) 20:47:23 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 641.763030][T21228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:23 executing program 5: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="60ff0000", @ANYRES16=0x0, @ANYBLOB="110827bd7000fcdbdf255e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900060000004b0000000800a1000000000005001901040000000800a100ff030000080022013b000000050019010f000000050018013b0000000800270003000000"], 0x60}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5000000010000104000000a33b2d41cd6ee93800682c775e537d", @ANYRES32=0x0, @ANYBLOB="130000000000000008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a0000000000", @ANYRES32=0x0, @ANYBLOB="08baef00e6fee3821bfe6d2da9b1345d429820e1c301f2a6ea9f6657fce01b880bb500e625bf32474ae0ac5ddf5c611645e5a459c3902f3cd6e813f026f6cd7f3cb10f6b4e37c23ef431fda6a0bedcc9ca004f0c962595ecdcb5a59741c6746927ea41fb5c204a5673d690fee8de44104b0b95"], 0x50}}, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="74656116958bc3e330d32fb5f935c3"], 0xf) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0)='ramfs\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) [ 641.844132][T21237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c08001b"], 0x30}}, 0x0) 20:47:23 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x268840) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r1], 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x2944, r3, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x1de, 0x2a, [@random_vendor={0xdd, 0xf2, "86e8c1ddd124822474b1fd6e3f147a0952fa13144aec03d090350eff7ddaab42cda0de09aac13e25c696923d511615de359b76e08ccb9c711d4a79ecf466cc324a1b63137b5b18a26cb6324cbca11dbee8ad6d245dcae16eb4f58e4f51687346c24802963d9d7d6346cb44b69b65bd528e966f012fbe53628991315638ad9e012f35168cbd945c274889200342e09699a0c07cad20694b485de59ac093614f725e4c7c45e9b61a7c5e1de95933b139970d82da2fb6cef74ef0901986791801b69ed22f4097dbb2d50133b0d2b41eb09c8d0beb3851f0dad0417c5669f74138c4a5f0c48cd2b1d1401c50643aa4b9e38625b4"}, @tim={0x5, 0xe1, {0x1, 0xbb, 0x0, "c6296d259588714547a9000c0b1a47350bf193117098022e86c6d36d2244bfbd27c1148acc051780969b5ccc3e9a919c81f64d95669fdd6c89df70f88bad80e6bb6f31810964af56ccdfc43baca2a671a3fd8c2e64a0994392c4bb8d056e8399e45b6b5045c46daf9e7eb5e916cad67e9020e9229ace56895bf27dde7af1a9e7338cadf16546f68e261eaaa5550d9fb5cb417069d5c28b30c0068cb553b14438bd7b7ff65db7fdd70332498389bdeb2ba87ad0bfd7cc7e2ee1011c46b03b0a78de337319b41715bc98dc0a3501b15dd5224e4547ad200990cca87f452188"}}, @dsss={0x3, 0x1, 0x40}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x5a, 0xfc, "8ce59e2b9426ab65b73b713c0f295bfd1e98ee7959d261e6c0f73cddf3ba1165381de4bbb64a9faafaaf0712fc426b1322bf379ebebfaed244ccd3e08595f173feef00329bca1bf744867387f29405d0ae2a79ad633e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "239125496734bb8b5edcb4a1a20dd024cae554fbfb6e791ba2968cd8d0d8f27153291a6a6acd1f70af7d3f5dbe94d808fc4526b22773b1e334bff7685d6b468e1b057d0599e5cb1329d84282be20b02641218273bc2677df4a186d73b0131d93b2edb30acf47c62a44994c34e0c1273a4f7173be865b3d89d1bc78711d766e8f6d017065c95162b617eccef397f2960e841eac6f49898eb7a2318c252d658bd38ed2318620e6e75e61a597759b769bb8a8f34395bfeaecabd31cac352dd466e5c84a637a6c390f3d93918d41a5d0f89690b87e4f7caecdb7af894e564c74af126f003c043b3b0e0ca42a86b500d0a1d173b71b8031e940560d18493571c812644fc27eabcc22143885c5b5c926d0c9e51d4dff4bdfefa600d307dcc1adbc54052fbc79666b9471a7a1696af9fa1497b098143ea43770e59f064ad90b9b59257489f292bc18c6501e6d142ff0f30aec2c4a8a37ff0ffe9522df099d7e2e60c721c93faeb0d85dbfbb710fd4fb781f96b7770d58034f93b476c8c34f354bab97a6cb705b955955b1c6e5c33957eb0e1f56c2f9af62ca1048f0dc35977348a5914cd9c68e15450b15be77a8bd4278deaac4900a5127e3d7e4be6293ef1bfe5962c76122c3036c8b691a8cd538f3e569dfdec4fbbd7c2f844fccd6709bc243562eceb9dffec5fd9db85e8457089378d4ba245d5b608f8a4a2a54579e81139a9efc35f71f1dd2bba2255080681567cd5f426c36b0a93ea209ff08f3962aeee60b8c7f2fbcf7f9fae702a2433e1bff80e55b13c5de8ebd323e74f73d92dd68e9fb47327ab40b832aaaf7d8340c1b8836150788b337b09a5eeb57c0536826aac01a610fbe6fd49e33cb89f3fe93aa3f8bff8491071e3aaa1f52786251fee7a4d36b90e9e19178c3d16e0464f308200dc923b393ebf12282090b38e685dc2c97c2329c3b5c3ffe4847962372c91fb75594f8cbd36e5b3a4b3cbcea5fd7e51c6e5596725cb14414206ea9012958aec8d0dd2694b138d4e14a5ea9153bd70547556954f84ce0346186ce913a66b9a56332b5d964b3ec654f474e8b555a90107d36f904a849f68ee1807671a88bfaef131d893657a4283bb4dcbda84ef96c2d9e423c34440ab6992b1578b247939980d8cfbfdfa11d38ad0c74a8c89fb12b9195687330f7ca1301e2caf9404a1921c448dd398accbaea96343d6c6b0104f07d418d514879564b31e27dbc7324dc8509324d7a89ff7f5cbdbbb48ed9cc5cfbdb5458fcdf04b44e8084a53f90f91accbcf8e2b96b1b29fd1f35af33b70e0aaecd13bc67ef983d867ead3b485a29a6fab4cc20a2ae5fe6c5933e0e46ddb8027c669de6b55b1994121d0c13a8fb775c6eace1948deb4dea6a0a4763b4231fcaeca7e4137b74cc5f22946a3b9f106ffafe105c336489abba458f962c961681179c5019abd747253e797a7a9552634acd024d53f514a3c8385348b5c5585a2f0b1fe90b1276ecfdb8c7ec3f216826c3dbcfa52084ab1b13080674165a99c77f1e0434431c26edad5afd36720a126027230934250e3c2e54542674906d142395a2b7a3d7e27c35c0c4da0868f0e091bb826d05e50fec94b5b006f4708587bc7b1773aff8195907092f3c54b7b69b917c0f9b17dbd53d57f3ca93dd3eb6e4b48737adaa24e2dd009d96dd09a2605a2b8f4217ca5549d26e774c7537190c279f1a7d0e215e8d3b04be1d569a3272d9d0d1b79626a629e53aed21b34cc72b65205ec95b5550b4ff1ed52e7ce2cd19d2b88713d20db5ae372e08b85144167347d8f7f4d62ba71f6501c407fa43d8dec2ba894a3653a5ada4a21a9499b4c5b6513dc321b21fbca98b8700797d6768246f5a8488b9e7b9e8390b9e368da9379eca7d629ae016fb8ad9a467f43d67fae4ebd42e38c36767f8f58ba099c04c7ec19567bab734866b1f12e4784be307f507debdaf8f91cbc16119d4dae8ff8fe425982e8b28af0c482144319e6b4a310ae838ce5015984b7fb7f8fa2441dc49c85f7e3a42a8a1317f4e05342207cb75a737f72fcda9fbf5875e6da9bb882c11460ecc5b3080c05857a7924bc4c37e57b5d6804b7c9f87416fd9163b831adb124ec14ca52dcc92eb7fa208eaef3ba137f207bc5f3b2b8653380a1f1b47d34db19201d1e0c336e0e6ca1c9dd06c8f37ff805ece717ef2a9a34b49cdc4e88a9a39521fbb7abd05b1d43a5b09be372cb1a6c76eb2c99a31ce93b34a94d9716a84c4cb1d478f24702f9dfb345c056ac0caf8e5d6ae3a7761aa3d495f14845fad83d49391fb6debca88dc133f401bc91a143ae1d025df34bd05877c7fc3db1dcc9399cd4d620ec8ce799cde384d168da1d53eb04d4c5c095bcdcf90f43d573aa4df608ca3b0b7ec544adc67a5a5a55521784f53dbbfa65d4cdcc73fbc7d5a89487b5ce2bc5a8cd1854dd3d804932d6d9590950227a087dd9e86a568443b48fbcbb7eedc3c92fc63ef4f7f5ac8e01f6abf6f92c8ea52c8b5c9e46dc1bcf9fcb48219dfeed6bb4496e8d5ab35160abdb125ddf012ec2c6023da0036309c8a151ce1c6500ca7fee8ef8d130730864d8ce23f25cdac2bf08c31542c57fd2095f6dfea7978d12c8f1193f5871f48b3686a08ed4d51de9dd6cfa2f77de44b336365bebb04e06c2cafa52e4e8c525caf61d88b59f15cb2564c84b8221d2e8ab8e25aaf63ced9f1330ee801e7dcc1300807c3559a34fcbe3ca7e69682b633841743eb4d1b4a0cdd7acaaef6ea71c95a6a99a44c770cda457878deefb0bbb1d55d31463f156ef610e843795e91d347e652a1f5a66c507063c179091c63510e34f1d86e166d2475ba9b552baf8caacec7ac76d9b345fdc1d7150be211fc3bce3753c30560470937f14724947057fa64bcc7f01b0380f8c116e50689ee92dd5d09a3bfc545dd3724fede475ce1e33358ddc2e74fd89b397c268cf37a8776ce83e047c1d1a6bd51748ef8d11d59c43fabf9060a853280226b7f8e8bca3c1949c02968cfb03e569fdf52af7e9a0582dd4801e904d0f5f5bb853f3a9e2d97d7f2d79c2a7349632693437b6ed1098969f658899376198760099547a4fda91acf7b900bc5e1782ed95fff1a05cbcc56c51fb267e11cadab171330e38bb4410fa128bb296eeef851cf4ba06c40e663a8788dcff11579fa60535050c736c8773763194fc7a92dbfc139061dbdc6cf42d895002f468108660febacd5c207f75f867d5c3bc30404b07e93a5896587ccf8365bd9a374dcf81926d9965c13b1ed82e14d1f3a20392179647edddb7d7171d80e3b65b5619dd02d5bd672394b9e6625fa67899b9d180ae21a908916b8b989576ad6f6294cc1662c911550195ee0c087e63e320167f202bf084c6010423bd222b211c47fd6332580d51b46b2cb7f10a27406b80de48bfe21b2bb46c72d3e228dbbabdf225eeab7558888f43f6e6bfb035db5c1f4781f8a550400d9dbc2d6b6909fa2efc3447430e9657b2b3e9df0d46ec3d4aa6be6cb47db69b0f8805d9231e3909cf4856b8a477a52422bfef6b8c59e85c6a71787d370295e2f2c4283d51fca5f13254a57cf6d825af536c45a65ac66c48fc88547896d55815af889508cb6ed49f847b6a55ca850288b6eeb02dd66bba8f20dae01a523382f94cfa745562b4c14b495068cc12fc8e6b5ee419cf77b8d3b604a9aa73a0be79b804b2dd4a0ca15b1a535504813f2be281852612bc39c9a53a5a42d7c0fc6c7739a4d4161837531dfe1a2eec8580e0540000d76f648c4c0b58f6fcd2296f96b5e0c3f459013dcf185a85e96d0cbdbd7bceb386c5320b8aa04892fc06a20bc5d13dafc8237408955c79d60bafa83a5bcd5266b59694ea1f3aae862182c13256e3f055b7eed1c8ad9f0a11cab55ea9c3cd0243537bafbc0c9bb827390b0ded4aaa1e586a76dc8c24e087c1e31abfdecf78a67c574e7817f399adaa3300f39479b5cb9f550c92531032ce44230676437186c958adb1505cec68f71b470259455fa20742bdb2be8410e3435c2fec37a9f838b80e496de0dce62af2d045dafba80f002ecd2ac076c3a53233b90901cafa01ad348550e35cbff51930ee0f9544cc37152cea1b7e9f7bbd3f62c48190a7529eda009f660f34e05577efe1cc228ead173841ddb8be86820d3fc1b45d06bf2c35442d1468ae4f638d7580e43fbafdbaef5674501f026dc772280fab37b81d04c4d7363f35b63f8c77093fa9ec8adfd42ad083637ae943c7053056f67384c5293fa8986b727fdfebeffdfa9ae0037530b4ef816ec6275dd897b759ba5d27b67345d329524f41268cb2004c97096503553f1f76443874b9d121edc899ee8a53f23ad1787f892419e93f5d7d65028fcae3fa1c96515e86e46e85f6283f71ffb6c0ea73d4c722294f187c6d4db4d4ad133a4fdb3b8c2686cfdd82d75d4785c2c1d3ddbe638b02c11b3d3fee3ecc1d71a89042275cbd1a59becb9494adac58656fd9cebfcc1b9a4954fb364c503da49be2dad588270b13bb61e9a190b1404a98458b2b828735f788363f65c3346b5ed0b76da5fd48dff1a2bae0cea7c8e5f8c0fa19ad60eb9a72db4c277cbc825282f8a4898bfe8c1a554ded929a65136e96620bc0382ad16ad2df659fd25e3743d89ce45bdf207c8cb473ad9ef43a73e3f7fcc122bc73a30833f832e888e05a45b0ff237c548372f185c359cbd93bd64846a19f6f1281863beadd5ec91bc063ea1cbfbcaad62b27205e6aecb788496f482a51298eb10c6fe9cd0e32e10a4e1d613a7fed016af8cc3f3dfea563f8f43f30cf848be2b2e65782daaeaeb3772081905879673b89a95db897a5243b7ffe3251c283b52a271b700a7e7aa6ab248bbfe4bea1aabf8bd5f279ce58cd65de79988029ec45eb138d866068f4984804a471071b4630548b4a4fb1f66e5bdb71998c3d6d29cac91ada72a9b35e52b00a0f95d88b3d8d212eca4b07190246f956df7103e33a5b43539c9de2298a3e430a8a56df81251f12f87a089a19595172cf9402945a87c929affc34e53af3e73b14852eb3aee5a7a08920d3c21aa1cfa510989b81fdde03e8538ab2b8b7b54fd0c518d5c2c31685ca3fa5e4f1153e94640962b6e77ed1d8fc537e8699a02e46ccb582e44f5b9f91de6e426b26112ae6da9853f86a88f0e332d4944b1b80648b6764359b38a5d2d9bb02293a8ff7948fc0a13fca702aac7b920cf218d6dca19e5388ed6334d18d77bf36bd6cce8152d93c914cbb21e465729523509d24a30d6139d32c3e6d2d3d2695c64f19bcf738c21b2f61fbf6c9dd1a1e02fed5527311ab8bc9a05599bf15ba1ce067979cf37219f754a7abee4deb175be0eae5e5406dfd8d45b71d25afd60530cb7a97b1ad9b73efe3cbca9167d6a03a958faff0225f88b735f3ff616501e56f26f8dc3687f5d4b5d2dd6b2774990f551164cb469d56c94c5192fb2e8aa2679fe6dfa518069547ea35e8777c34ced6bdf51100b7d08ace66c230a69f74633db81cd00b3b1d4dcd4b073976dc4c2cb24e42015aaf2e44136fcaf299b969bc6d37b64795c0deda2064934a8dd1ea4531fc4c8865155d566d9b910519d72fd75751cd34226731c96926ace8358d95fb0c38bb96a739dcc433e37aaeadf591c176dd9dff9fcb2348716a3e026cfdf1b92fd97c1dc1e46b95fc494bb1024470211893b750a76d07975d1b79fc02181d743fe12860720607aa1d3e73049c5a9ff89a9321e364a43e0dd3dc06de473711f5b128be51eb00a645e3789464c2e5d7a82b3b74e531a66e7e3b0a50b2316c8b2fdb004999929"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xa0}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "e58e5e5bb2c74b1ce9244d842649cc8089143e1df37fdbb2a1131fd8dfac4c4f1174d8cdda451b5462f0478e1c035ed15c1f3cd4b7f15c36540edf923f8568497876d94b0c279004d862eaae57d790d50f8601f719231898a43f1ca66fe57ec98b8f8c3aad043cdc29588961ea"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfffa}, @NL80211_ATTR_FILS_ERP_RRK={0xf1, 0xfc, "c37731936e684f44b71e90b202faebfd59fd94b02d0cb642202b6adc978eb669d7906212cf0fbc32595c027840e95fad608ed30d3a5952376ae953ef368e0d6ae7b2e3670c0028dcdf3bf1807b1af47b708354b6474388b7767d80ee239786102ea806b9cc2f1c63e2a4a47a4c80a09f4aaa64bf072453ccb77e13696019ed1fa866156f3d16c5dbb290541ac52466195e7390846b45e16b135c4366f6a1624cc1e3f2e3fef317e875ed7fddd89a9e92381fa262a030cbcb3d680884d3c03ba5bbf3b5d61bed148eea04a6c60cc1a2a5ab6e3750f39ff0d8b80778106e2de18e0ddf4f5322fdf2e0482a2f95a0"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xeb82}, @NL80211_ATTR_FILS_ERP_REALM={0x30, 0xfa, "3ad48206d73bdef761b8bd5c5eb0c782359ced12c72e353ccaa9307b9ea0a500353102dbb255812c7a0ba77c"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x12}], @NL80211_ATTR_IE={0x1105, 0x2a, [@supported_rates={0x1, 0x8, [{}, {0x60, 0x1}, {0x24}, {0x6c}, {0x6c}, {0x34, 0x1}, {0x60, 0x1}, {0x2}]}, @ssid={0x0, 0xb, @random="6ec7c0f8fae9db98fba261"}, @measure_req={0x26, 0x1003, {0x4, 0x2, 0x80, "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"}}, @fast_bss_trans={0x37, 0xd3, {0x60, 0x6, "b8a88811513595a3a73c0378f166bff0", "aa0a4c182369cda536359f7a8ae3fe2b422185b1ee9d79e3c1dcead2a1d7eae5", "803e22e68c809b66c498f4c7b8ab1c8fb854a335c418e8a85a3ff7e44c06b5d6", [{0x2, 0x16, "244f554ba40ca9d46f48f1413ea118d4db738edb29d0"}, {0x2, 0x10, "da06eb160a6657efa1f701d6b66309d5"}, {0x1, 0x25, "829640a37012380ec6c11f96fd1a2d33f6f4995d06bf42f289f6ef3a4a14fb09f4d6430153"}, {0x1, 0xc, "10f2ba22cf0e848f3c8d86b4"}, {0x4, 0x1b, "5f80ad7e20600bdd77a1c8b4a90935d815f9f26570e940945fc394"}, {0x1, 0x3, "8655f0"}]}}, @mesh_chsw={0x76, 0x6, {0x8, 0x7, 0x1b, 0xb2}}, @mesh_chsw={0x76, 0x6, {0x80, 0x4, 0x5}}]}, @NL80211_ATTR_IE={0x148, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @perr={0x84, 0x135, {0x0, 0x13, [@not_ext={{}, @device_b, 0x100, "", 0xd}, @ext={{}, @device_a, 0x0, @device_b, 0x26}, @ext={{}, @device_a, 0x7, @device_a, 0x27}, @not_ext={{}, @device_b, 0x81, "", 0x3}, @ext={{}, @device_a, 0x69, @device_b, 0x20}, @not_ext={{}, @broadcast, 0x4, "", 0x36}, @not_ext={{}, @device_b, 0xff, "", 0xc}, @ext={{}, @device_b, 0x6, @device_b, 0xd}, @ext={{}, @device_b, 0x7, @broadcast, 0xb}, @not_ext={{}, @device_a, 0x27b7, "", 0x40}, @ext={{}, @device_b, 0x7fffffff, @device_a, 0x11}, @not_ext={{}, @broadcast, 0x0, "", 0x1b}, @ext={{}, @device_b, 0xdb, @broadcast, 0x14}, @not_ext={{}, @device_b, 0x1, "", 0x25}, @ext={{}, @broadcast, 0x1, @device_b, 0x4}, @ext={{}, @device_a, 0x200, @device_a, 0x31}, @not_ext={{}, @broadcast, 0x100, "", 0x41}, @ext={{}, @broadcast, 0x400, @device_a, 0x18}, @not_ext={{}, @device_b, 0x80, "", 0x27}]}}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x3}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "8a1d7b3ae683464a81dd6b40299a"}, @NL80211_ATTR_FILS_ERP_REALM={0x77, 0xfa, "5ec409aa848c6698e231300aa03102759000251da7ad63fbd7cfce6a202f1c0a832887e47f14faa10f71ff3e6c55a3a71ef8af5dbfaa6e772232480190b1058f98a29b5a8b94e6f46f6c9dc7a40386f75632c90436bf6288515ff59464b6404084946ce7dfe2e8267d4b588eaafea6902af74e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "22f8c3b04e63e6db4ae7aa"}, @NL80211_ATTR_FILS_ERP_REALM={0x57, 0xfa, "7dd497a9eca2b57c6ff82b584a344c35d119a63b32010436c741485e2b394a666cf044edc120f4cec5ae3eb9dd204966cd943f5db88ee5e2dfc4286a001a03a48c8651bcc275e95c3934f9492cfa91f7a96564"}], @NL80211_ATTR_IE={0xfd, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x20, 0x6, @device_b, 0xfffffffd, "", 0x40, 0x800, @device_b, 0x4000000}}, @random={0x81, 0x95, "31892332aa9efd89861a66ebfdc9b7efddff0c7ea2544bbfdbcb4203c78a74e826312fc41333650e8bac6f98c645c8b0182bae2f811fa15f4f39c268e2525ccf598165fd54bd797e7486dd4804908626f3f51a82e10c95d645694048be64cb9bf342711b0edda7463a1339e899150224a21d3b2a909d95a6912374909a805b375ff0b08c042e9043ac58de9c79b846dde61fb27f86"}, @rann={0x7e, 0x15, {{0x1, 0x4b}, 0x4, 0x7, @device_b, 0x1, 0x2, 0x4}}, @challenge={0x10, 0x1, 0x80}, @rann={0x7e, 0x15, {{0x0, 0x77}, 0x1, 0x76, @broadcast, 0x2, 0x7ff, 0x4}}, @ssid={0x0, 0x6, @default_ap_ssid}, @peer_mgmt={0x75, 0x6, {0x2, 0x1, @void, @val=0x41, @void}}]}, @NL80211_ATTR_IE={0xdc, 0x2a, [@chsw_timing={0x68, 0x4, {0x4, 0x1}}, @perr={0x84, 0xc2, {0x9, 0xc, [@ext={{}, @device_a, 0x7fff, @broadcast}, @ext={{}, @broadcast, 0xffffffff, @device_a, 0x10}, @not_ext={{}, @device_b, 0x10000, "", 0x5}, @ext={{}, @broadcast, 0x400, @device_a, 0x18}, @not_ext={{}, @broadcast, 0xfffffff8, "", 0x8}, @not_ext={{}, @device_a, 0x401, "", 0x15}, @not_ext={{}, @broadcast, 0x5ee, "", 0xc}, @not_ext={{}, @device_a, 0x20, "", 0x22}, @ext={{}, @broadcast, 0x4, @device_b, 0x3a}, @not_ext={{}, @device_b, 0x7, "", 0x6}, @ext={{}, @broadcast, 0x10000, @device_b, 0x20}, @ext={{}, @device_a, 0x3, @device_a, 0x3d}]}}, @ssid={0x0, 0xc, @random="de6566e7b0542629a9b222e6"}]}]}, 0x2944}}, 0x4040) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) [ 642.024097][T21247] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 642.056761][T21251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e08001b"], 0x30}}, 0x0) [ 642.078152][T21247] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 642.131828][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 642.822434][ T163] device bridge_slave_1 left promiscuous mode [ 642.838855][ T163] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.847043][ T163] device bridge_slave_0 left promiscuous mode [ 642.863025][ T163] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.489768][T21260] cgroup1: Unknown subsys name 'perf_event' [ 643.495990][T21260] cgroup1: Unknown subsys name 'net_cls' [ 643.530048][T21260] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.537114][T21260] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.544903][T21260] device bridge_slave_0 entered promiscuous mode [ 643.551654][T21260] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.559075][T21260] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.566710][T21260] device bridge_slave_1 entered promiscuous mode [ 643.609694][T21260] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.616836][T21260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.624235][T21260] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.631234][T21260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.650670][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.658232][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.666779][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.676164][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.684674][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 643.693033][T17837] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.700034][T17837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.708731][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 643.717383][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 643.725574][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.732609][ T9662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.744417][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 643.752594][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 643.765411][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 643.773506][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 643.792694][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 643.800889][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 643.809193][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 643.817096][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 643.825453][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 643.833648][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 643.841696][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 643.849933][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 20:47:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000000000000a001b"], 0x30}}, 0x0) 20:47:25 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd026, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:25 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r2, @ANYRESHEX, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r0], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1336, 0x5b}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x773}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x20}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc4}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x200088d4}, 0x4000000) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:25 executing program 2: fcntl$setown(0xffffffffffffffff, 0x8, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r1, 0x811, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa895}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16d5}]}, 0x54}}, 0x0) dup(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='fuse\x00', 0x40038, &(0x7f0000000700)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id'}, 0x2c, {[], [{@fowner_eq={'fowner'}}, {@euid_gt={'euid>'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='cpuset\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="13000000000000002800128008000100736974001c0002800800140000988a0008000300ac1e0101060008000080000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0) mount(&(0x7f0000000540)=ANY=[@ANYBLOB="3bf9adb7e9f2b123b50fcdbb6f4601ff192b8795f5cf05f2ff9919bb3c648f3695c1eb3789ccba8e271d57694afd5af72a7526b110bde4862f09ec18c3d7c93433fb15993f98af5dec1b248a31010636c2e56a45ea6e6399e48c62782002c66100000000000000"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='dax\x00', 0x1, &(0x7f0000000200)='/-*\\%{.:$$$)},{\'&}\x06\x00') inotify_init1(0x0) 20:47:25 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:25 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe0ff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 643.863201][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 643.871380][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:47:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c0c001b"], 0x30}}, 0x0) [ 643.931708][T21271] new mount options do not match the existing superblock, will be ignored [ 643.937264][T21277] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 643.967193][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 644.004666][T21285] cgroup1: Unknown subsys name 'perf_event' [ 644.011210][T21285] cgroup1: Unknown subsys name 'net_cls' [ 644.049481][T21286] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 644.058211][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 644.125841][T21285] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.133198][T21285] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.140658][T21285] device bridge_slave_0 entered promiscuous mode [ 644.147626][T21285] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.155094][T21285] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.162529][T21285] device bridge_slave_1 entered promiscuous mode [ 644.209621][T21285] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.216672][T21285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.223953][T21285] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.230960][T21285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.254403][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 644.262783][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.269941][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.293724][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 644.301820][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.308847][ T9656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.317139][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.325553][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.332591][ T9656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.340220][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 644.348687][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 644.362362][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 644.370335][T17837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.389728][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 644.398204][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:47:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e0c001b"], 0x30}}, 0x0) 20:47:26 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xea03, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:26 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '.):\\\x00'}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x2000000, 0x0) [ 644.407166][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 644.430888][T21297] new mount options do not match the existing superblock, will be ignored [ 644.440061][T21297] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. [ 644.451743][T21297] new mount options do not match the existing superblock, will be ignored 20:47:26 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xeb26, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 644.457084][T21299] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 20:47:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 644.512282][T21310] netlink: 'syz-executor.3': attribute type 27 has an invalid length. 20:47:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="050300000000cc310c80060000000027e4aa1f3f00ff000000000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000044) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000010001b"], 0x30}}, 0x0) 20:47:26 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xedc0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 644.558338][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:26 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:26 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:26 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x8, 0x0, 0x0, 0xa21011, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) [ 644.628052][T21322] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 645.468801][ T563] device bridge_slave_1 left promiscuous mode [ 645.479320][ T563] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.487905][ T563] device bridge_slave_0 left promiscuous mode [ 645.494039][ T563] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.501338][ T563] device bridge_slave_1 left promiscuous mode [ 645.508113][ T563] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.515857][ T563] device bridge_slave_0 left promiscuous mode [ 645.522143][ T563] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.099830][T21337] cgroup1: Unknown subsys name 'perf_event' [ 646.106051][T21337] cgroup1: Unknown subsys name 'net_cls' [ 646.139731][T21337] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.147037][T21337] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.154441][T21337] device bridge_slave_0 entered promiscuous mode [ 646.161174][T21337] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.168205][T21337] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.175591][T21337] device bridge_slave_1 entered promiscuous mode [ 646.208899][T21337] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.216045][T21337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.223428][T21337] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.230434][T21337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.249579][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.257079][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.265571][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.274704][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.282877][T17802] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.289869][T17802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.302655][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.310873][T17802] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.317922][T17802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.325803][T17802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.335484][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.349779][ T9669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 20:47:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000910001b"], 0x30}}, 0x0) 20:47:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf504, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:28 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 646.370463][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.379934][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 646.388620][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.396711][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 20:47:28 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x93a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x90}, 0x40000) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c10001b"], 0x30}}, 0x0) [ 646.445100][T21350] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 646.537946][T21368] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 646.573811][T21371] cgroup1: Unknown subsys name 'perf_event' [ 646.581070][T21371] cgroup1: Unknown subsys name 'net_cls' [ 646.615549][T21371] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.622615][T21371] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.629857][T21371] device bridge_slave_0 entered promiscuous mode [ 646.637053][T21371] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.644121][T21371] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.651386][T21371] device bridge_slave_1 entered promiscuous mode [ 646.684804][T21371] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.691989][T21371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.699199][T21371] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.706216][T21371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.725318][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.732821][ T3050] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.739914][ T3050] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.750650][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.759288][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.766465][ T9656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.793014][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.801449][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.808489][ T9656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.816146][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.824230][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.841818][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 646.850277][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 646.858749][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 646.867076][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 646.875077][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 646.883289][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.893674][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 646.902187][ T9656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 646.911492][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 646.920686][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:47:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf803, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:28 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x7f, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/112, 0x70, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x19) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x1ff) 20:47:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e10001b"], 0x30}}, 0x0) 20:47:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c14001b"], 0x30}}, 0x0) 20:47:28 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:28 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfc00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:28 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:28 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "3334e4e6a5ce4057f6b5d5"}, 0xc, 0x0) [ 647.089574][T21388] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 647.124704][T21398] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e14001b"], 0x30}}, 0x0) [ 647.203306][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:29 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='incremental-fs\x00', 0x0, 0x0) 20:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c18001b"], 0x30}}, 0x0) 20:47:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x10, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e18001b"], 0x30}}, 0x0) 20:47:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff01, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:29 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0xa482, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x8, 0x0, [], [{0x4, 0x7, 0x6, 0x8, 0x3572, 0x100000000}, {0x3, 0xffffffff, 0xf68, 0x7, 0x1146, 0x4f64}], [[], [], [], [], [], [], [], []]}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 647.409687][T21431] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 647.485371][T21442] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x1, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'U+', 0xff}, 0x16, 0x2) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x8, 0x0, 0x3}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffff3f, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0xc73}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x50000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2002021, 0x0) 20:47:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff03, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:29 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x240880, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x1f}}], [{@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffd}}, {@smackfshat={'smackfshat', 0x3d, ',\\\xcf'}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@pcr={'pcr', 0x3d, 0x31}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@context={'context', 0x3d, 'root'}}]}) 20:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c1c001b"], 0x30}}, 0x0) 20:47:29 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e1c001b"], 0x30}}, 0x0) 20:47:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0xd, 0x87, 'l2_drops\x00'}, {0x5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x80) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:29 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 647.709669][T21469] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 647.752530][T21480] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:29 executing program 5 (fault-call:5 fault-nth:0): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff0f, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c20001b"], 0x30}}, 0x0) 20:47:29 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x3f, {{0xa, 0x4e22, 0x1, @loopback, 0x7}}}, 0x88) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e20001b"], 0x30}}, 0x0) 20:47:29 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:29 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18dd43, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0xc008ae88, &(0x7f0000001a40)={"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"}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) [ 647.944595][T21502] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 647.967601][T21507] FAULT_INJECTION: forcing a failure. [ 647.967601][T21507] name failslab, interval 1, probability 0, space 0, times 0 20:47:29 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xffa1, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 648.014779][T21516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 648.034542][T21507] CPU: 1 PID: 21507 Comm: syz-executor.5 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 648.044779][T21507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.054812][T21507] Call Trace: [ 648.058088][T21507] dump_stack+0x1dd/0x24e [ 648.062393][T21507] ? devkmsg_release+0x11c/0x11c [ 648.067305][T21507] ? kstrtouint_from_user+0x224/0x2a0 [ 648.072646][T21507] ? show_regs_print_info+0x12/0x12 [ 648.077814][T21507] ? refcount_sub_and_test_checked+0x1bb/0x290 [ 648.083937][T21507] should_fail+0x6fb/0x860 [ 648.088337][T21507] ? setup_fault_attr+0x3d0/0x3d0 [ 648.093352][T21507] ? proc_fail_nth_write+0x1e1/0x250 [ 648.098632][T21507] ? getname_flags+0xb8/0x610 [ 648.103290][T21507] should_failslab+0x5/0x20 [ 648.107854][T21507] kmem_cache_alloc+0x36/0x270 [ 648.112587][T21507] getname_flags+0xb8/0x610 [ 648.117068][T21507] user_path_at_empty+0x28/0x50 [ 648.121894][T21507] __se_sys_newlstat+0xde/0x870 [ 648.126716][T21507] ? __x64_sys_newlstat+0x60/0x60 [ 648.131710][T21507] ? debug_smp_processor_id+0x20/0x20 [ 648.137051][T21507] ? __fsnotify_parent+0x310/0x310 [ 648.142136][T21507] ? __sb_end_write+0xb5/0x100 [ 648.146879][T21507] ? __ia32_sys_read+0x80/0x80 [ 648.151613][T21507] do_syscall_64+0xcb/0x150 [ 648.156089][T21507] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 648.161950][T21507] RIP: 0033:0x45e149 [ 648.165816][T21507] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 648.185389][T21507] RSP: 002b:00007f28937abc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 648.193777][T21507] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 648.201715][T21507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 20:47:30 executing program 2: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 648.209654][T21507] RBP: 00007f28937abca0 R08: 0000000000000000 R09: 0000000000000000 [ 648.217592][T21507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.225536][T21507] R13: 00007fff1ac1f28f R14: 00007f28937ac9c0 R15: 000000000119bf8c [ 648.252317][T21521] incfs: Error accessing: ./file0. 20:47:30 executing program 5 (fault-call:5 fault-nth:1): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c24001b"], 0x30}}, 0x0) 20:47:30 executing program 2: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xffe0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 648.278762][T21521] incfs: Error accessing: ./file0. 20:47:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000000e0603000000000105000000000000000073797a32000000000000020073797a3080000000"], 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0xc000) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.redirect\x00', &(0x7f0000000580)='./file0/file0\x00', 0xe, 0x5) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)='incremental-fs\x00', 0x1128041, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000004c0)=""/41) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) mknodat(r0, &(0x7f00000006c0)='./file0/file0\x00', 0x8000, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000340)="beded55427d92ce3e4994498fa7d17c470b45cb2900eae20768bccf48f63925ec4955069a5f04bc34b399705192cde61f15464b8f116c86fd8540a6f9c042d75399687ca35e82426b4d2263a334c751e46ba61cad72fd540ac9134545dec8ed946081de8efdfa22d086d8190bef4f723d61dff51856009e8b829c907e2b4cf76b800c76fd4bb8eef06731d72ece73576a166eef7c3bfdb7d1189925751760679e04f1443ed688637e8c5de4b0a405f61b497dda422528a4a460ffbc5abeaf3d67e448ee653a0e6c782f8dba368705bfa6e48203a9180347172c65c49a4c8747693a59fa4005bee2fcc6689cd05ae", 0xee) write$FUSE_STATFS(r1, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r3, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x30, 0x0, 0x200, 0x70bd27, 0x2, {{}, {}, {0x14, 0x19, {0x0, 0xfffffffd, 0x3, 0x270a}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x4004) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)=""/139, 0x8b) 20:47:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 2: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 648.316072][T21535] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000928001b"], 0x30}}, 0x0) [ 648.358950][T21540] FAULT_INJECTION: forcing a failure. [ 648.358950][T21540] name failslab, interval 1, probability 0, space 0, times 0 [ 648.391444][T21540] CPU: 0 PID: 21540 Comm: syz-executor.5 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 20:47:30 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 648.396513][T21552] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 648.401692][T21540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.401696][T21540] Call Trace: [ 648.401717][T21540] dump_stack+0x1dd/0x24e [ 648.401728][T21540] ? devkmsg_release+0x11c/0x11c [ 648.401738][T21540] ? show_regs_print_info+0x12/0x12 [ 648.401747][T21540] ? stack_trace_save+0x120/0x1f0 [ 648.401759][T21540] should_fail+0x6fb/0x860 [ 648.401768][T21540] ? setup_fault_attr+0x3d0/0x3d0 [ 648.401776][T21540] ? stack_trace_snprint+0x150/0x150 20:47:30 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 648.401801][T21540] ? avc_has_perm_noaudit+0x37d/0x400 [ 648.401809][T21540] ? __d_alloc+0x2a/0x6b0 [ 648.401815][T21540] should_failslab+0x5/0x20 [ 648.401823][T21540] kmem_cache_alloc+0x36/0x270 [ 648.401830][T21540] ? memset+0x1f/0x40 [ 648.401837][T21540] __d_alloc+0x2a/0x6b0 [ 648.401845][T21540] ? __rcu_read_lock+0x50/0x50 [ 648.401853][T21540] d_alloc_parallel+0xf3/0x1360 [ 648.401862][T21540] ? lockref_get_not_dead+0x1d6/0x340 [ 648.401869][T21540] ? __rcu_read_lock+0x50/0x50 [ 648.401882][T21540] ? unwind_next_frame+0x1aa9/0x1f30 [ 648.510462][T21540] ? __d_lookup_rcu+0x609/0x650 [ 648.515296][T21540] ? __legitimize_mnt+0x77/0x1d0 [ 648.520206][T21540] ? d_hash_and_lookup+0x1e0/0x1e0 [ 648.525283][T21540] ? unlazy_walk+0x385/0x610 [ 648.529845][T21540] ? lookup_fast+0x52f/0xfd0 [ 648.534406][T21540] __lookup_slow+0x14f/0x450 [ 648.538965][T21540] ? lookup_one_len+0x2c0/0x2c0 [ 648.543782][T21540] ? generic_permission+0x13a/0x490 [ 648.548955][T21540] walk_component+0x3e5/0x960 [ 648.553655][T21540] ? follow_managed+0x950/0x950 [ 648.558489][T21540] ? path_init+0x1220/0x1220 [ 648.563045][T21540] ? path_init+0xab7/0x1220 [ 648.567514][T21540] path_lookupat+0x212/0xa50 [ 648.572072][T21540] ? getname_flags+0xb8/0x610 [ 648.576719][T21540] ? filename_lookup+0x6e0/0x6e0 [ 648.581630][T21540] filename_lookup+0x251/0x6e0 [ 648.586359][T21540] ? hashlen_string+0x120/0x120 [ 648.591188][T21540] ? getname_flags+0x20d/0x610 [ 648.595920][T21540] __se_sys_newlstat+0xde/0x870 [ 648.600735][T21540] ? __x64_sys_newlstat+0x60/0x60 [ 648.605727][T21540] ? debug_smp_processor_id+0x20/0x20 [ 648.611069][T21540] ? __fsnotify_parent+0x310/0x310 [ 648.616152][T21540] ? __sb_end_write+0xb5/0x100 [ 648.620882][T21540] ? __ia32_sys_read+0x80/0x80 [ 648.625618][T21540] do_syscall_64+0xcb/0x150 [ 648.630094][T21540] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 648.635975][T21540] RIP: 0033:0x45e149 20:47:30 executing program 5 (fault-call:5 fault-nth:2): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c28001b"], 0x30}}, 0x0) 20:47:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:crond_var_run_t:s0\x00', 0x25, 0xa0d07e9c6b6a7230) [ 648.639855][T21540] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 648.661511][T21540] RSP: 002b:00007f28937abc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 648.669891][T21540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 648.677833][T21540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 648.685771][T21540] RBP: 00007f28937abca0 R08: 0000000000000000 R09: 0000000000000000 [ 648.693800][T21540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.701741][T21540] R13: 00007fff1ac1f28f R14: 00007f28937ac9c0 R15: 000000000119bf8c 20:47:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7ff00, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x100000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 648.766254][T21575] FAULT_INJECTION: forcing a failure. [ 648.766254][T21575] name failslab, interval 1, probability 0, space 0, times 0 [ 648.781043][T21575] CPU: 0 PID: 21575 Comm: syz-executor.5 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 648.793022][T21575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.803065][T21575] Call Trace: [ 648.806363][T21575] dump_stack+0x1dd/0x24e [ 648.810689][T21575] ? devkmsg_release+0x11c/0x11c 20:47:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1fffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 648.815621][T21575] ? show_regs_print_info+0x12/0x12 [ 648.820809][T21575] ? __d_lookup+0x4c4/0x520 [ 648.825303][T21575] should_fail+0x6fb/0x860 [ 648.829714][T21575] ? setup_fault_attr+0x3d0/0x3d0 [ 648.834727][T21575] ? up_write+0x187/0x280 [ 648.839053][T21575] ? up_read+0x10/0x10 [ 648.843112][T21575] ? dir_lookup+0x433/0x8e0 [ 648.847605][T21575] should_failslab+0x5/0x20 [ 648.852098][T21575] kmem_cache_alloc_trace+0x39/0x290 [ 648.857368][T21575] dir_lookup+0x433/0x8e0 [ 648.861696][T21575] ? read_single_page+0x9d0/0x9d0 [ 648.866708][T21575] ? d_hash_and_lookup+0x1e0/0x1e0 [ 648.871811][T21575] ? unlazy_walk+0x385/0x610 [ 648.876382][T21575] ? lookup_fast+0x52f/0xfd0 [ 648.880944][T21575] __lookup_slow+0x2f8/0x450 [ 648.885507][T21575] ? lookup_one_len+0x2c0/0x2c0 [ 648.890340][T21575] ? generic_permission+0x13a/0x490 [ 648.895507][T21575] walk_component+0x3e5/0x960 [ 648.900163][T21575] ? follow_managed+0x950/0x950 [ 648.904990][T21575] ? path_init+0x1220/0x1220 [ 648.909549][T21575] ? path_init+0xab7/0x1220 [ 648.914146][T21575] path_lookupat+0x212/0xa50 [ 648.918704][T21575] ? getname_flags+0xb8/0x610 [ 648.923398][T21575] ? filename_lookup+0x6e0/0x6e0 [ 648.928305][T21575] filename_lookup+0x251/0x6e0 [ 648.933036][T21575] ? hashlen_string+0x120/0x120 [ 648.937855][T21575] ? getname_flags+0x20d/0x610 [ 648.942601][T21575] __se_sys_newlstat+0xde/0x870 [ 648.947422][T21575] ? __x64_sys_newlstat+0x60/0x60 [ 648.952457][T21575] ? debug_smp_processor_id+0x20/0x20 [ 648.957920][T21575] ? __fsnotify_parent+0x310/0x310 [ 648.962999][T21575] ? __sb_end_write+0xb5/0x100 [ 648.967733][T21575] ? __ia32_sys_read+0x80/0x80 [ 648.972465][T21575] do_syscall_64+0xcb/0x150 [ 648.976939][T21575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 648.982797][T21575] RIP: 0033:0x45e149 [ 648.986658][T21575] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.006227][T21575] RSP: 002b:00007f28937abc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 20:47:30 executing program 5 (fault-call:5 fault-nth:3): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x200000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000029001b"], 0x30}}, 0x0) 20:47:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2040802, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x2048417, 0x0) [ 649.014604][T21575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 649.022543][T21575] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 649.030484][T21575] RBP: 00007f28937abca0 R08: 0000000000000000 R09: 0000000000000000 [ 649.038424][T21575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.046362][T21575] R13: 00007fff1ac1f28f R14: 00007f28937ac9c0 R15: 000000000119bf8c 20:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="00000000000000092c001b"], 0x30}}, 0x0) 20:47:30 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x0, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@ipv4={[], [], @empty}, @private1, [0xff000000, 0x0, 0xffffff00, 0xffff00], [0x0, 0xffffffff, 0x0, 0xffffff00], 'ipvlan1\x00', 'vlan1\x00', {}, {0xff}, 0x0, 0xad, 0x4, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28, 'mh\x00'}, {"8416", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@mcast2, @loopback, [0x0, 0xff, 0x0, 0xffff00], [0xff, 0x0, 0xff, 0xffffffff], 'bond_slave_0\x00', 'macvlan0\x00', {}, {}, 0x32, 0x3, 0x1, 0xa}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x40, 0x2], 0x8, 0xd, 0x1}}, @common=@hbh={{0x48, 'hbh\x00'}, {0x4, 0x2, 0x1, [0x3f, 0x7ff, 0x2, 0x5, 0x101, 0x1000, 0x9, 0x0, 0x4a, 0x9, 0xfeb, 0x1000, 0x8, 0x2, 0x4fd, 0xd5d2], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@dscp={{0x28, 'dscp\x00'}, {0x80, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 20:47:30 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 649.115055][T21605] FAULT_INJECTION: forcing a failure. [ 649.115055][T21605] name failslab, interval 1, probability 0, space 0, times 0 20:47:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c2c001b"], 0x30}}, 0x0) 20:47:30 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 649.156720][T21606] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 649.171258][T21605] CPU: 1 PID: 21605 Comm: syz-executor.5 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 649.181405][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.191444][T21605] Call Trace: [ 649.194730][T21605] dump_stack+0x1dd/0x24e [ 649.199057][T21605] ? devkmsg_release+0x11c/0x11c 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c30001b"], 0x30}}, 0x0) [ 649.203982][T21605] ? selinux_inode_getxattr+0x2b1/0x3d0 [ 649.209516][T21605] ? show_regs_print_info+0x12/0x12 [ 649.213141][T21606] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 649.214698][T21605] ? find_inode+0x40a/0x4c0 [ 649.214707][T21605] ? selinux_inode_post_setxattr+0x510/0x510 [ 649.214722][T21605] ? capable_wrt_inode_uidgid+0x13f/0x1d0 [ 649.244923][T21605] should_fail+0x6fb/0x860 [ 649.249348][T21605] ? setup_fault_attr+0x3d0/0x3d0 [ 649.254360][T21605] ? _raw_spin_lock+0xa3/0x1b0 [ 649.259250][T21605] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 649.264609][T21605] ? is_bad_inode+0x9/0x40 [ 649.269013][T21605] ? __vfs_getxattr+0x15d/0x6e0 [ 649.273855][T21605] ? alloc_inode+0x43/0x80 [ 649.278262][T21605] should_failslab+0x5/0x20 [ 649.282754][T21605] kmem_cache_alloc_trace+0x39/0x290 [ 649.288063][T21605] ? _raw_spin_unlock+0x49/0x60 [ 649.292885][T21605] ? ilookup5+0x18e/0x190 [ 649.297185][T21605] ? get_order+0x30/0x30 [ 649.301402][T21605] ? incfs_handler_setxattr+0x2b0/0x2b0 [ 649.307021][T21605] alloc_inode+0x43/0x80 [ 649.311236][T21605] ? get_order+0x30/0x30 [ 649.315448][T21605] iget5_locked+0xa2/0x3e0 [ 649.319835][T21605] ? inode_test+0x1a0/0x1a0 [ 649.324313][T21605] dir_lookup+0x82c/0x8e0 [ 649.328614][T21605] ? read_single_page+0x9d0/0x9d0 [ 649.333613][T21605] ? d_hash_and_lookup+0x1e0/0x1e0 [ 649.338697][T21605] ? lookup_fast+0x52f/0xfd0 [ 649.343269][T21605] __lookup_slow+0x2f8/0x450 [ 649.347827][T21605] ? lookup_one_len+0x2c0/0x2c0 [ 649.352644][T21605] ? generic_permission+0x13a/0x490 [ 649.357812][T21605] walk_component+0x3e5/0x960 [ 649.362459][T21605] ? follow_managed+0x950/0x950 [ 649.367277][T21605] ? path_init+0x1220/0x1220 [ 649.371835][T21605] ? path_init+0xab7/0x1220 [ 649.376305][T21605] path_lookupat+0x212/0xa50 [ 649.380865][T21605] ? getname_flags+0xb8/0x610 [ 649.385508][T21605] ? filename_lookup+0x6e0/0x6e0 [ 649.390412][T21605] filename_lookup+0x251/0x6e0 [ 649.395141][T21605] ? hashlen_string+0x120/0x120 [ 649.399957][T21605] ? getname_flags+0x20d/0x610 [ 649.404688][T21605] __se_sys_newlstat+0xde/0x870 [ 649.409506][T21605] ? __x64_sys_newlstat+0x60/0x60 [ 649.414496][T21605] ? debug_smp_processor_id+0x20/0x20 [ 649.419833][T21605] ? __fsnotify_parent+0x310/0x310 [ 649.424924][T21605] ? __sb_end_write+0xb5/0x100 [ 649.429658][T21605] ? __ia32_sys_read+0x80/0x80 [ 649.434389][T21605] do_syscall_64+0xcb/0x150 [ 649.438866][T21605] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 649.444725][T21605] RIP: 0033:0x45e149 [ 649.448589][T21605] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.468170][T21605] RSP: 002b:00007f28937abc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 649.476560][T21605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 649.484501][T21605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 [ 649.492442][T21605] RBP: 00007f28937abca0 R08: 0000000000000000 R09: 0000000000000000 [ 649.500382][T21605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 20:47:31 executing program 5 (fault-call:5 fault-nth:4): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e30001b"], 0x30}}, 0x0) 20:47:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc00000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:31 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/208, 0xd0, 0x6) prctl$PR_SET_ENDIAN(0x14, 0x1) [ 649.508324][T21605] R13: 00007fff1ac1f28f R14: 00007f28937ac9c0 R15: 000000000119bf8c 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c34001b"], 0x30}}, 0x0) 20:47:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x801000, 0x0) [ 649.565542][T21631] FAULT_INJECTION: forcing a failure. [ 649.565542][T21631] name failslab, interval 1, probability 0, space 0, times 0 [ 649.583964][T21639] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 649.594006][T21631] CPU: 0 PID: 21631 Comm: syz-executor.5 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 20:47:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff0700, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 649.608168][T21631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.618210][T21631] Call Trace: [ 649.620997][T21639] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 649.621493][T21631] dump_stack+0x1dd/0x24e [ 649.639741][T21631] ? devkmsg_release+0x11c/0x11c [ 649.644668][T21631] ? show_regs_print_info+0x12/0x12 [ 649.649858][T21631] should_fail+0x6fb/0x860 [ 649.654265][T21631] ? setup_fault_attr+0x3d0/0x3d0 [ 649.659318][T21631] ? security_inode_alloc+0x32/0x1f0 [ 649.664591][T21631] should_failslab+0x5/0x20 [ 649.669196][T21631] kmem_cache_alloc+0x36/0x270 [ 649.673939][T21631] security_inode_alloc+0x32/0x1f0 [ 649.679017][T21631] inode_init_always+0x37c/0x800 [ 649.683921][T21631] ? incfs_handler_setxattr+0x2b0/0x2b0 [ 649.689431][T21631] iget5_locked+0xb9/0x3e0 [ 649.693813][T21631] ? inode_test+0x1a0/0x1a0 [ 649.698284][T21631] dir_lookup+0x82c/0x8e0 [ 649.702582][T21631] ? read_single_page+0x9d0/0x9d0 [ 649.707575][T21631] ? d_hash_and_lookup+0x1e0/0x1e0 [ 649.712656][T21631] ? lookup_fast+0x52f/0xfd0 [ 649.717214][T21631] __lookup_slow+0x2f8/0x450 [ 649.721768][T21631] ? lookup_one_len+0x2c0/0x2c0 [ 649.726590][T21631] ? generic_permission+0x13a/0x490 [ 649.731757][T21631] walk_component+0x3e5/0x960 [ 649.736535][T21631] ? follow_managed+0x950/0x950 [ 649.741352][T21631] ? path_init+0x1220/0x1220 [ 649.745907][T21631] ? path_init+0xab7/0x1220 [ 649.750385][T21631] path_lookupat+0x212/0xa50 [ 649.754958][T21631] ? getname_flags+0xb8/0x610 [ 649.759602][T21631] ? filename_lookup+0x6e0/0x6e0 [ 649.764510][T21631] filename_lookup+0x251/0x6e0 [ 649.769242][T21631] ? hashlen_string+0x120/0x120 [ 649.774101][T21631] ? getname_flags+0x20d/0x610 [ 649.778833][T21631] __se_sys_newlstat+0xde/0x870 [ 649.783650][T21631] ? __x64_sys_newlstat+0x60/0x60 [ 649.788689][T21631] ? debug_smp_processor_id+0x20/0x20 [ 649.794031][T21631] ? __fsnotify_parent+0x310/0x310 [ 649.799108][T21631] ? __sb_end_write+0xb5/0x100 [ 649.803876][T21631] ? __ia32_sys_read+0x80/0x80 [ 649.808611][T21631] do_syscall_64+0xcb/0x150 [ 649.813087][T21631] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 649.818946][T21631] RIP: 0033:0x45e149 [ 649.822845][T21631] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 649.842418][T21631] RSP: 002b:00007f28937abc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 649.850795][T21631] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 649.858736][T21631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000240 20:47:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e34001b"], 0x30}}, 0x0) [ 649.866682][T21631] RBP: 00007f28937abca0 R08: 0000000000000000 R09: 0000000000000000 [ 649.874650][T21631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 649.882595][T21631] R13: 00007fff1ac1f28f R14: 00007f28937ac9c0 R15: 000000000119bf8c 20:47:31 executing program 5 (fault-call:5 fault-nth:5): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c38001b"], 0x30}}, 0x0) 20:47:31 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000002340), 0x8) write$P9_RLERROR(r1, &(0x7f0000002380)={0x9, 0x7, 0x2}, 0x9) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x8, &(0x7f0000000680)=[{&(0x7f0000000080)="4db3cb19905a98ca40d192bd4dbec9798c4732a16aa02a11b0b526a4bf645754e3a14ca48457eac043c4b45b20de495f18e1fe4964f56a7b70ad45ec4baefe7528a4227741784ff02db4d9c3b75f52f163f85c297341fd10cab06d7775da0b741bcfa244d631daba7024fd35881ad9af3b149ea3faabab20db32ced03f534674112ad7db4dd439c13b687e15f0ef0f7a98fbc9a4af347c03d478b5eee68552a13516b7dc57d44d7659a4b2b16d6e0c01e3a96096c98a96d6173b3bf436438de6433b82a291e91de3a82d0f7833c57e772c13599bf652ed00bbb3", 0xda, 0x694}, {&(0x7f00000001c0)="2484844f5a88bccf11894cca170b2d74dbad1e7ddee22c", 0x17, 0x5d}, {&(0x7f0000000200)="1a74e1031ca6e4c1452d6dabf60c3592e71eb2c4bba73afdc0ff14def1222b77d1926335d33e5ff8aca72a7c45905df5b1ecd8d4962f6fee4fe3f1", 0x3b, 0x3}, {&(0x7f0000000380)="9dff9ebd7a5890439b7a3d348e3bcee4078fa9547bac4eb3822a3d10dba64d14ea3297a1334cd7fc3384037247ef29ce621db2cedb93679b66db94ff0fbbff2653bc6500a4b1f4d0051e5c38ea3db10e7c41cfa6505220a992b0ac98ac3583b605785558b60e84521c4e0d46138d2ef2c386a2311d38e01a4ebefa35a085cd498ac0bedc0110de541a57250201edd0cfcef82a73a1ad68414abfdda5e424515bec701072c9caf4f3c6396c7e9eb9d7dd69eade9907dcce864a77fd28bd1e2010d4b9340b76c0cd4482fb56f102a6b981f0b51848b276a2d3b6987b4ee9f5b1c072f711c4", 0xe4, 0x20}, {&(0x7f0000000480)="619fd22844b4f14e3e0439d905a94011cf79f24cdaf85c3bbd5d0ba4993a5aae745b469c64404c4516c3081de82d094d1f9567ae47603b12c86b172c0f7270b1454778259ae8be45f2b12e5016264f17cb46138fa6e1672afc72b0fb7fbc934874b169a1c469aaedf060f3452ec37fb02cb500fea9f6a96907b2729af6a908c11f7680c7d029c3d02be88fc6371eb08aeabf08ac34aaa066a652baca89d399d99a31786966f38dac406325c92b82fcde4ec209910a60a988919d78bce3baa74a9359ce5fc1e8c660b04f4694fc50245bf58d2554c38f904b744adb882d205dbf86a9b7e7ecf56f00ad045b2bc636", 0xee, 0x80}, {&(0x7f0000000240)="c0e53b214be3abd4e9e0479fc02daba60ec4e72a39eb28fdbd13e5232183cd70c05fc75004f111", 0x27, 0x6}, {&(0x7f0000000280)="bd24597794a3739d922096c9e83c49b90a250e8a4331b414f4639b353e472c6aee9b39d2c87ff61e329e", 0x2a, 0x4}, {&(0x7f0000000580)="47b6f19adbaa96a78345c8b71fe826d6515679df6308b6376e2869584e684081e3027d33fc6d836252ba7e11bc90a7fe7156b7bb349dd80684af0f3360b25e715c10a7281b14caaa659fb3b922265f028633ce41b9955f88e355d8c08534ce67983fa010694425646d3a8f5d3e4b60b0b1fba93b3028697b67dccd495e46b51a9ed4e4026c95a24264b189e751abf6f4acc92b8f999a8362c0e38ccf3378a6c8f680df021eb250c937c664635ece900d84d5292786e028888ff93b3b340fd19f757102b7ae64a56ac6b794f14f0e001cd44c8ee511c70119", 0xd8, 0x100000001}], 0x1008, &(0x7f0000000740)={[{@noacl='noacl'}, {@nouser_xattr='nouser_xattr'}, {@acl='acl'}, {@acl='acl'}, {@noacl='noacl'}, {@acl='acl'}], [{@subj_type={'subj_type', 0x3d, 'incremental-fs\x00'}}, {@euid_lt={'euid<', r2}}, {@subj_user={'subj_user', 0x3d, '$$/-:(/'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x37, 0x31, 0x34, 0x61, 0x33, 0x38, 0x31], 0x2d, [0x37, 0x33, 0x65, 0x31], 0x2d, [0x64, 0x63, 0x37, 0x30], 0x2d, [0x62, 0x30, 0x31, 0x30], 0x2d, [0x38, 0x32, 0x34, 0x38, 0x66, 0x31, 0x35, 0x35]}}}, {@subj_role={'subj_role'}}]}) 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 649.927501][T21653] incfs: Backing dir is not set, filesystem can't be mounted. 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e38001b"], 0x30}}, 0x0) 20:47:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x1000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b3c001b"], 0x30}}, 0x0) 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) utimensat(r1, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={{0x77359400}}, 0x100) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:31 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) [ 649.995230][T21668] incfs: Backing dir is not set, filesystem can't be mounted. [ 650.034965][T21675] incfs: Backing dir is not set, filesystem can't be mounted. 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c3c001b"], 0x30}}, 0x0) 20:47:31 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:31 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:31 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x19, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATFS(r1, 0x0, 0x9c) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000080)={0x1, 0x200, 0xfff}) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 650.063499][T21685] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 650.066705][T21686] incfs: Backing dir is not set, filesystem can't be mounted. [ 650.081365][T21685] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e3c001b"], 0x30}}, 0x0) 20:47:31 executing program 4: mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='incremental-fs\x00', 0x0, 0x0) 20:47:31 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 650.151407][T21696] incfs: Backing dir is not set, filesystem can't be mounted. [ 650.159116][T21700] incfs: Backing dir is not set, filesystem can't be mounted. 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x20, 0x0) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2c, 0x80000000, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x89}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xd9}]}, 0x34}, 0x1, 0x0, 0x0, 0x145}, 0x24044014) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000040001b"], 0x30}}, 0x0) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c40001b"], 0x30}}, 0x0) [ 650.197442][T21708] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='incremental-fs\x00', 0x49000, 0x0) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e40001b"], 0x30}}, 0x0) 20:47:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c44001b"], 0x30}}, 0x0) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) bind(r0, &(0x7f00000004c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, 0x4}, 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x28) write$FUSE_STATFS(r2, 0x0, 0x0) move_mount(r1, &(0x7f0000000400)='./file0\x00', r2, &(0x7f0000000440)='./file0/file0\x00', 0x30) write$FUSE_STATFS(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x28000}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000009c0)=ANY=[@ANYRESHEX, @ANYRES64=r6, @ANYBLOB="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", @ANYRES16=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4008010}, 0x20048010) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:32 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10a) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="4c8d2c47d3743daaf87033359c33fc05", 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 650.301059][T21708] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e44001b"], 0x30}}, 0x0) 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)={{r3, r4/1000+60000}, {r1, r2/1000+60000}}) [ 650.373997][T21742] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 650.390006][T21751] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 650.399776][T21753] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3030000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c48001b"], 0x30}}, 0x0) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r4, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r2], 0x24}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x12}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3c}]}, 0x30}}, 0x4000) openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x109000, 0x19) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 650.434460][T21753] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e48001b"], 0x30}}, 0x0) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x14, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c4c001b"], 0x30}}, 0x0) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e4c001b"], 0x30}}, 0x0) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$CHAR_RAW_FRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0xc9fd) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 650.614910][T21799] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 650.639204][T21799] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b50001b"], 0x30}}, 0x0) 20:47:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:32 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x7) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x389080, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x2090198) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="05000000060000006542dd3b6613003d4f5559fc23dd", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000002900)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000380)={0x35c, 0x16, 0x200, 0x70bd26, 0x25dfdbfc, "", [@typed={0xc, 0x3f, 0x0, 0x0, @u64=0x9}, @nested={0x1d9, 0x5, 0x0, 0x1, [@typed={0x8, 0x2e, 0x0, 0x0, @fd}, @generic="740c9142afa530396969757031e23f824ddad424e138c1768e3d27723fc91e8327ac8d16c8c005e9dfeaec94699d71d48aa901a4e6ffe386811003b6d5fbb2801db70095a1a40044904773e0e09d2d5db1325d9420645581c758db5ad92a592b7021be52d8bd209841df91d1bcc7a744875eae6dea5482615dc424138e85d67406afa3b126e6389ba089f71be8d25dad6ddddd37cf85e2711e8abab151911397d9664ab5ec7e25c913b681cde0f2c541662ca9da54ab4eca95203eccb3bb13f5fabfb57099832f231557cfe0adda761a485965867ad451aa69dcc9534b02337eb506b77cb8cb129f7b38cdabe4c85558f758e85f1f", @typed={0x57, 0x5, 0x0, 0x0, @binary="c5885993ea995ba5d56749cac1e86b30664d815b4f011003ba54192db1ab0b5f3f8989e4d120204fb42dd2e55e232d3af0aa8e58cf0d04e27904554de3169f4eae6f4221af2dcc0762fec03db2a40163960fcb"}, @typed={0xe, 0x7f, 0x0, 0x0, @str='/dev/zero\x00'}, @generic="8fa1e73bc9bd2a19a0c86db82f2ce702dc2253105c648f5682e3fc2fbff55a096b4ca2f5def251dd351b46550d63ae93099aa4488550b09f056be5bc535f3e372285383d56b49370397a2cbf6b9c258041fad23e912f2ff203a19a347279b2ce49febe17e2870916", @typed={0x8, 0x1b, 0x0, 0x0, @u32=0x6}]}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @ipv4=@private=0xa010101}]}, @nested={0x72, 0x7b, 0x0, 0x1, [@generic="c9e3025188dfd989cbe513fd6744fc6a89b22b59bd95a1d48e6092016c8415fc69e01b72dc9688fa6a9a1156c4d1ddcaa7505ca760ca4b1739df4d1c405d6e261a2b4fb11233318695f998dea0f6d8a3a10d1b4625d490722f2c2d6cec68d5cc60a85baf2100f7cdc95a7a93dcad"]}, @nested={0xe4, 0x5d, 0x0, 0x1, [@typed={0xdd, 0x5b, 0x0, 0x0, @binary="e08b7b4f59cbd9a4d1faed1cdcf6b163f223500d8429237e0d5138c879dcb7b4c0ff7a609217810dbfe15b397f9828bcbdc2208ca3fa59d6747a614f081ec6fc142c0d23d2a6685e7d1df9e83fc04c32e6021eb613dd064ca9fcc82f0d8b8c1b5c666e9b0e72469422daecc4fe3bc4191d2ab5dd2f5c410fec286686caaeb079e5389a00f83997c3bcd819243a7c8680abf43158ab93ed73818d55cf0f2c00ab68fe7e9ee1ab9434ea391bb4e698e6857b11c1c8157ed9ab1cc935b20670115c61b1d4bbc22b186f05e5c8ba04c5aa57e89a7a5056e1040f06"}]}]}, 0x35c}], 0x1, &(0x7f00000027c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r1, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r3]}}, @rights={{0x1c, 0x1, 0x1, [r0, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x128, 0xc}, 0x40004) 20:47:32 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$getregset(0x4204, r0, 0x6, &(0x7f00000000c0)={&(0x7f0000000040)=""/126, 0x7e}) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$incfs(r1, &(0x7f0000000100)='.log\x00', 0x20000, 0x81) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000000380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) fsetxattr$security_capability(r3, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x0, 0x101}, {0xe54, 0x7}]}, 0x14, 0x3) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4}, 0x50) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0xfffffffffffffffe, r4, {0x7, 0x20, 0x2, 0x20010, 0x7, 0x5d01, 0xfffffffc, 0x8}}, 0x50) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000300)={0x20, 0x20, 0x8fe, 0xfffc}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r5, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, &(0x7f0000000140)) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c50001b"], 0x30}}, 0x0) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e50001b"], 0x30}}, 0x0) 20:47:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x6000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 650.832320][T21818] fuse: Bad value for 'fd' [ 650.847660][T21824] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 650.863350][T21824] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x3, 0x0, 0x0, 0x200d004, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:32 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x4d) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) time(&(0x7f0000000100)) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x8) [ 650.888691][T21832] fuse: Bad value for 'fd' 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b54001b"], 0x30}}, 0x0) 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sync_file_range(r0, 0x0, 0x3, 0x5) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(0x0, 0x8) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='incremental-fs\x00', 0x900000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(0x0, 0x8) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(0x0, 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c54001b"], 0x30}}, 0x0) 20:47:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x7000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 650.947311][T21846] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 650.977526][T21846] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x4b) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r1 = getpid() syz_open_procfs(r1, &(0x7f00000001c0)='net/rfcomm\x00') ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000040)=0x7) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x1810, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e54001b"], 0x30}}, 0x0) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(0x0, 0x8) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(0x0, 0x8) 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0x1ff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000040)="778d19a9272bc62d56a903d7fa1c50e44bf0d26abc578ca99a705126b066fbb56520a49886af4d140843f8ab09cf25055abff40ccc15865a65718624edbbdb3f9ae32e08f88bf962a3932ad0e2317d17b03fd67d102eaad828784c6e0f79c930c3dbb37b430f231b926c78973ea5aba06f1f3c613c5e7b0f0fb788c76ed18ee417738d13b09b78c6d5a7f0e20dde21096ed4b3de180d9154ae2240dfa9555e4a00a24a0c058debfff734f0") mkdir(&(0x7f0000000100)='./file0\x00', 0xf67a8a9f06cb0254) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) utime(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)={0x3ff, 0xffffffff}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000380)="d3539d650474d032d2caeb9b53b84e6b472a19c8bdd1f7956027caa09a62a3387b391ec4174961875f5cbb1932169e1fc644eeea677430a722a13c791edd861b8eab420db526da154e6a8d0611c453df70e273e66cc59e6c52c19969452253956ceb10d917d9f6cc8563d13bb6d060f33e46da01a1cb33681f5a4c80695aac27ac56a5a0208abeeea6f2f587d0a337aabe8337b4fc46f7c00aa60bd2003503e660a2d72e6823129462fcbe456dd31b21620d30aa12b6e1b9a103cb054640184d933baa3385f5586b5b00d74a058a60839a7ef0035ea9958e36e460c39f2b6723f9fea769c3feb8a25d28c4b7cbbb7fe0cf7e5538d8599da8af156c", 0xfb, 0x40008000, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r2, @ANYRESHEX, @ANYRES32=r3, @ANYBLOB, @ANYRES32=r0], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r2, 0x10, 0x70bd2d, 0x1, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x1}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff9}, @NL80211_ATTR_SCAN_SUPP_RATES={0xe8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xce, 0x0, "ea84925be02b0ce5e0f73d42ad27b3ed5cd3c832263de322b3481c7bdd760c9de0aa8a09b298b2c15e49413e2f451bee43edaf42842a44bb94d6d08a9df243f7a0979adc2cb11ed81043a7f86c66037e05d10d052b52731eaa2f6d06149608f3ac20584293dc8801870c5c98a8fd9f92858671d3aaeff68f335d927a0a0fb8503cad09f0a66ae779bc74875c683187bc526d9e6f6fe88d107ded1b7f578d169614ed55950f40ccbcf727c746cf06dbb4e834becdce7674ee25c7edbdf54ad80617cb48fe6eded0464688"}, @NL80211_BAND_60GHZ={0x13, 0x2, "cf2e3922064338caa26572ac633d79"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x200}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}]}, 0x11c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) 20:47:32 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(0x0, 0x8) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c58001b"], 0x30}}, 0x0) 20:47:32 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101, 0xfffffffffffffffc}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x4004, 0x0) 20:47:32 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000380)={{0x2, 0xffffffff, 0xa0c, 0xffffefbd, 0x5, 0x9}, 0x3ff, [0x6, 0x3, 0x7, 0xfffffffe, 0x7, 0x0, 0xe5e7, 0x6, 0x5, 0x81, 0xfff, 0x4, 0xb0b, 0x2, 0x7, 0x8, 0xfffffbff, 0x5, 0x3ff, 0x9, 0x6, 0x2, 0x4000, 0x2, 0xe3, 0x2, 0xea, 0x61a, 0x31, 0x7, 0x323, 0x0, 0x0, 0x3, 0x6, 0x7, 0x3, 0x2, 0x5, 0xd43, 0x518, 0x6, 0x21, 0x0, 0x8, 0xa300, 0xff, 0x5, 0x3, 0x5, 0x5, 0x81, 0x8, 0x800, 0x3, 0x3, 0x0, 0x6, 0x4, 0x2, 0x81, 0x9, 0xffff, 0x6, 0x400, 0x0, 0x8, 0x842e, 0x3, 0xfffffffe, 0x6, 0xc0000, 0x0, 0x80000001, 0x8, 0x81, 0x3, 0x0, 0xe6b, 0x2, 0x0, 0x4, 0x10001, 0x7b9d, 0xfffffffa, 0x1f, 0xf, 0x9, 0xdd1, 0x2, 0x81, 0xe6, 0x9, 0x6, 0x6, 0x6, 0x1, 0x80000000, 0xffffffff, 0x6, 0x0, 0x40000000, 0x5, 0x8, 0xb2b2, 0x38, 0x5, 0x8, 0x9, 0x1, 0x0, 0x93c, 0x0, 0x2, 0x1, 0x1, 0x3, 0x8, 0x8, 0x7, 0x8, 0x4, 0x4, 0x5, 0x2, 0xfffffff9, 0xa, 0x7, 0x3ff, 0x7ff, 0x0, 0x1, 0x5, 0xd4d2, 0x9, 0xcd84, 0x8, 0x9, 0x7, 0x40b4, 0x20, 0xffffff23, 0xd3, 0x0, 0x80, 0xf2a5, 0x3ff, 0x2, 0x2, 0x1, 0xd0, 0x100, 0x3, 0x1000, 0x76, 0xd3, 0x3f, 0x9, 0x8732, 0x6e, 0x4, 0x20, 0xfff, 0xeaf, 0x3f, 0x5, 0x36d, 0x5, 0x101, 0xffffffff, 0x2, 0xe0, 0x7, 0xb39, 0x100, 0x1f, 0x9e00, 0xaa1, 0x9, 0x20, 0x2, 0x2, 0x3, 0xcf, 0x3f, 0x9, 0x4, 0x5, 0x3ff, 0x5, 0x6, 0x8, 0x7, 0x8001, 0xec, 0x4c, 0xbd8, 0x5, 0x7fff, 0x8, 0x7, 0x10001, 0x9e6, 0x7, 0x0, 0x3, 0xef2, 0xffff3c68, 0x20, 0x6, 0xffffffe1, 0xfc0b, 0x7, 0x2, 0x9, 0x1, 0x5, 0x8, 0x9, 0x1, 0x679, 0x10001, 0x5, 0xaee, 0x10000, 0x20, 0x3f, 0x8, 0x1, 0x200, 0x29d6, 0x3, 0x200, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001, 0x8, 0xfffffff8, 0x4, 0x7fffffff, 0x1, 0x4, 0x400, 0x1, 0x5, 0x9, 0x2, 0x9, 0x3, 0x3, 0x2, 0x5, 0x1000, 0xc2000, 0x2, 0x2, 0x3, 0xffff8000, 0xa611, 0x7, 0x0, 0xac2e, 0x7, 0x6, 0x2, 0x7ff, 0x7, 0x9, 0x7, 0x1f, 0x4, 0x50, 0x6, 0x401, 0x6c43, 0x8, 0x3ff, 0x1, 0x0, 0xa06, 0x1, 0x74aa, 0x2, 0x298a, 0x8, 0x1, 0x4, 0x5, 0x1e, 0x101, 0x4, 0x5e63, 0x2, 0x1, 0x6, 0x6, 0x1, 0x5, 0x59d, 0x8, 0x3, 0x684a9d00, 0x101, 0x8, 0x4800, 0xcec, 0x5, 0x1, 0xfffffff8, 0x5, 0x1, 0x4, 0x43, 0x1, 0x3, 0x8, 0x401, 0x1, 0x4, 0x1000, 0x86, 0xffffffff, 0x9, 0xfff, 0x0, 0x9, 0x80000000, 0x2, 0x8000, 0x80000001, 0x0, 0x0, 0x80000001, 0x5, 0x8000000, 0x6, 0x5, 0xffff, 0x5, 0xffffff00, 0xf9b, 0x8000, 0xd, 0x3, 0x1, 0x6, 0xffffffff, 0x76961093, 0xfc21, 0x901, 0x5, 0x7, 0x8, 0x6, 0x4, 0x8, 0x7, 0x2, 0x1, 0x836, 0x4, 0x7, 0x3, 0x0, 0x9, 0x5, 0x5edf, 0x401, 0x30f, 0x6, 0x2, 0xffff, 0x13, 0xfffffe01, 0x6, 0x3, 0x80000001, 0xb2c, 0x97, 0x1, 0x3da, 0x39, 0x3, 0x1f, 0xffff, 0x4, 0x1, 0x489, 0xfff, 0x0, 0x0, 0xfffffff9, 0x9, 0x43a0, 0x7fff, 0xe34f, 0xff, 0x8, 0x0, 0xc00000, 0x5, 0xfffffff7, 0x80, 0x80, 0x2, 0x1ff, 0x2, 0x4, 0x400, 0x7, 0x0, 0x2, 0x7ff, 0x3, 0x1, 0x1, 0x3f, 0x629, 0x5b58, 0x6, 0x7, 0x200, 0xfffffffc, 0xf09, 0x6, 0x400, 0x5, 0x8aa1, 0x40, 0x1cf1, 0x8, 0x807, 0x101, 0x6, 0x3, 0x8, 0xd82b, 0x0, 0x80, 0x80000001, 0x10000000, 0x7, 0x5, 0xf9a, 0x3, 0x7, 0x5901601, 0x101, 0x0, 0x5, 0xcaaf, 0x7fff, 0x9, 0x80000001, 0x7fffffff, 0x5, 0xfffffffe, 0x6, 0x0, 0x2, 0x704, 0x40, 0x9d2, 0x20, 0x1000, 0x6, 0x6, 0x8, 0x7ff, 0x2, 0x7fff, 0xf0f2, 0xfe000000, 0x8, 0x7, 0x2, 0x3f, 0x36, 0x3, 0x0, 0x1f, 0x7fff, 0x1, 0x5, 0x8c, 0x4, 0xa74, 0xffffffff, 0x1, 0x0, 0x10000, 0x2b, 0x8, 0x6, 0x7a10, 0x3, 0x3, 0x6, 0x0, 0x3, 0xb40, 0xffffffff, 0x5, 0x40, 0x200, 0x6627, 0x0, 0x1, 0x9, 0x200, 0x3ff, 0x1, 0x101, 0x5, 0x0, 0x400, 0xef3, 0x7bcb207c, 0x7fffffff, 0x5, 0x80, 0x0, 0x5, 0x3, 0x2, 0xbb, 0xfffffffb, 0x4, 0x3d9a7361, 0x6, 0x4, 0x7c4, 0x9, 0x2, 0x400, 0x8000, 0x10000, 0x5, 0x9, 0x414, 0xff, 0x800, 0x5, 0x5, 0x6, 0x8, 0x1, 0x6, 0x0, 0x6, 0x8, 0x867, 0x9, 0x6, 0x1f, 0x8, 0x4b, 0x2, 0x6, 0x8, 0x0, 0x10001, 0x5, 0x8, 0x5, 0x80000001, 0x6f27, 0x6, 0x7fff, 0x6, 0xa1, 0x20, 0x401, 0x9, 0xffff, 0x2, 0x2, 0x5, 0x7, 0x6, 0x1, 0x3, 0x5, 0x3, 0x80000001, 0x1, 0xc2, 0x6, 0x3ff, 0x1, 0x10000, 0xffffffc1, 0x3, 0x20, 0x4, 0x0, 0x5, 0x3, 0x3f, 0xff, 0x3, 0x2, 0x7395, 0x7fff, 0xf4c, 0x200, 0x1, 0x0, 0x10001, 0x2, 0x70000000, 0x2, 0x8000, 0x5, 0xffffff81, 0x9, 0x7, 0x9, 0x8001, 0x7e, 0xff, 0x5, 0x3, 0x7fffffff, 0x0, 0x4b, 0x9, 0x6, 0x80, 0xc492, 0x176, 0x8001, 0x400, 0x8, 0x9, 0x8, 0x80000000, 0x80000000, 0x5, 0x800, 0x9, 0x7, 0x5, 0x1, 0x7, 0x9, 0x3, 0x6, 0x3ff, 0x8, 0x101, 0x3, 0x6, 0x98, 0x3ff, 0x800, 0xffffffff, 0x10001, 0x2, 0x4, 0x4, 0x7fff, 0x80, 0x4, 0x2, 0x0, 0x7, 0x1, 0x400000, 0x4, 0x6, 0x9, 0x8, 0x7f, 0x3, 0x2, 0x20, 0xffffffff, 0x401, 0x3, 0x9, 0x2, 0xba1b, 0x3, 0x20, 0x8001, 0x20, 0xff, 0x10001, 0xffff, 0x10000, 0x2, 0x758bd238, 0x5, 0xc8db, 0x8, 0x7f, 0x5, 0x4, 0x3ff, 0xffff, 0x2, 0x336, 0x9, 0x9, 0x8, 0x7fff, 0x7, 0x2, 0xd18, 0x6, 0x5c1c, 0x1b6, 0x7ff, 0xffffffff, 0xa9d, 0x857, 0xe89, 0x7, 0x2, 0x400, 0x1, 0x1c, 0x800, 0x7, 0x2, 0x3, 0xfffffff8, 0xf9, 0xe420, 0x0, 0x2, 0x1, 0x1, 0x6, 0x8001, 0x9, 0x8, 0x5, 0x0, 0x1000, 0x2, 0xfffffffb, 0x7ff, 0xffffffff, 0x1db, 0x80, 0x8, 0x3, 0xfab, 0xf1, 0x9724, 0x5, 0x9, 0x0, 0x9, 0x5, 0x7fffffff, 0xfffffff7, 0x400, 0x43e5, 0x3f, 0x3, 0x9, 0xb9, 0x0, 0x56cd, 0xc8, 0xf3, 0xfffff001, 0x9, 0x2, 0x7ff, 0x0, 0xffff0000, 0x19a7, 0x6, 0x2, 0x3, 0x0, 0x200, 0x1, 0x8001, 0x8, 0xfffffff8, 0x0, 0xffffffe0, 0x9, 0x1, 0x2, 0x3, 0x4, 0x1, 0x5, 0x8, 0x7fffffff, 0x40, 0x8000, 0x7, 0x9, 0x1, 0x254f, 0x6d01, 0x0, 0x918, 0x10001, 0x6c, 0x4, 0x5, 0xaea, 0x6b, 0x80000001, 0x7, 0x40, 0x4, 0xfffffffc, 0x800, 0x80000001, 0x6, 0x0, 0x9b, 0x51, 0x800000, 0x6e, 0x6, 0x0, 0x7e, 0x0, 0x7fffffff, 0xca, 0xfe, 0x8, 0x7fff, 0x1, 0x0, 0x6, 0x0, 0xcde, 0x6, 0x8e, 0x62, 0x400, 0x4a, 0x9bb, 0x9, 0x0, 0x1000, 0x7fff, 0x1, 0x3, 0x10000, 0x8, 0x8, 0xc14, 0x800, 0x5, 0x5, 0x3ff, 0x0, 0xfff, 0x2, 0x0, 0x6, 0x2, 0x80000000, 0x200, 0x7, 0xffff, 0x1, 0x0, 0x337e, 0x4, 0x7, 0x7fffffff, 0xff, 0x0, 0xffffffff, 0x6, 0x16, 0x200, 0x9, 0x4, 0x2, 0x7fff, 0x200, 0x6, 0x1, 0x7, 0xfffffffd, 0x4, 0x9, 0x1000, 0x0, 0x4, 0xd2b, 0x3, 0x9, 0x8000, 0x1, 0xb3, 0x8, 0x7, 0x7, 0x3, 0x5, 0x4, 0x4, 0x9, 0x7, 0x40, 0x5, 0xffff, 0x9, 0x40, 0x1, 0x10000, 0x5, 0x1, 0xffff, 0x0, 0x3ff, 0x3, 0xdbaf, 0x2, 0x9, 0x40, 0x5, 0x5, 0x80000000, 0x6, 0x0, 0x4, 0x3ff, 0x7, 0x8, 0x7, 0x200, 0x4, 0x3, 0x8, 0x80000000, 0x5, 0x80, 0x5, 0xffffffe1, 0x1ffc, 0x9, 0xff, 0x1, 0x2000000, 0x8, 0x7fffffff, 0x2, 0xd7e4eb4a, 0x8, 0x9, 0x0, 0xe8d, 0x6, 0x7f, 0x8, 0x3, 0xcb, 0x7fffffff, 0x1, 0x3f, 0xc13d, 0x10000, 0x6, 0x7, 0x7fff, 0x2, 0x5, 0x1000, 0x3, 0xff, 0x7, 0x742c, 0x1, 0xd9, 0xe8f, 0x5, 0x4, 0x10000, 0x401, 0x559, 0x61, 0x6, 0xd92a, 0x101, 0x80, 0x7fffffff, 0x200, 0x3ff, 0x8, 0x983, 0x5, 0x8, 0x3, 0x7, 0x2a, 0xd0, 0x4, 0x0, 0x10001, 0xffffffff, 0x3f, 0x9f5b, 0x8000, 0x6, 0x6, 0x6, 0x4c, 0x400, 0xfffffffe, 0x4, 0x7f, 0xfffff15c, 0x8, 0x4, 0x9, 0x3]}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e58001b"], 0x30}}, 0x0) 20:47:32 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:32 executing program 5: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) 20:47:32 executing program 2 (fault-call:4 fault-nth:0): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) [ 651.100237][T21872] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 651.132240][T21872] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c5c001b"], 0x30}}, 0x0) [ 651.202613][T21907] incfs: Error accessing: ./file0. [ 651.206366][T21905] FAULT_INJECTION: forcing a failure. [ 651.206366][T21905] name failslab, interval 1, probability 0, space 0, times 0 [ 651.228025][T21910] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 651.230382][T21905] CPU: 1 PID: 21905 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e5c001b"], 0x30}}, 0x0) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000960001b"], 0x30}}, 0x0) [ 651.247878][T21910] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 651.252302][T21905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.252305][T21905] Call Trace: [ 651.252322][T21905] dump_stack+0x1dd/0x24e [ 651.252330][T21905] ? devkmsg_release+0x11c/0x11c [ 651.252338][T21905] ? show_regs_print_info+0x12/0x12 [ 651.252345][T21905] ? memset+0x1f/0x40 [ 651.252358][T21905] ? fsnotify+0x13a0/0x1460 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b60001b"], 0x30}}, 0x0) 20:47:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4}, 0x50) write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r4, {0x200}}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r5, 0x0, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000100)=0x1004800, 0x4) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4e700f0dcc324261607f9021e608de2caecbb100000000000000000003001700000000000000e2cdb7222afb591171aa6e5daab45dfd3a69703667c08f574a4fcc480decbd4129447e3e1e4d2f2443282847998469f65d1589ee706b611a6062b7a359ce3261ef933aad57dc18d9d68a8955201218fd49bff38a"], 0x34}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x330, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x22008000}, 0x1) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c60001b"], 0x30}}, 0x0) [ 651.302435][T21905] should_fail+0x6fb/0x860 [ 651.306932][T21905] ? setup_fault_attr+0x3d0/0x3d0 [ 651.311945][T21905] ? debug_smp_processor_id+0x20/0x20 [ 651.317313][T21905] ? __fsnotify_parent+0x310/0x310 [ 651.322415][T21905] ? getname_flags+0xb8/0x610 [ 651.327087][T21905] should_failslab+0x5/0x20 [ 651.331579][T21905] kmem_cache_alloc+0x36/0x270 [ 651.336341][T21905] ? __sb_end_write+0xb5/0x100 [ 651.341094][T21905] getname_flags+0xb8/0x610 [ 651.345672][T21905] do_mkdirat+0x9e/0x330 [ 651.349907][T21905] ? vfs_mkdir+0x5f0/0x5f0 [ 651.354314][T21905] do_syscall_64+0xcb/0x150 [ 651.358811][T21905] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 651.364689][T21905] RIP: 0033:0x45e149 [ 651.368614][T21905] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 651.388198][T21905] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 20:47:33 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8040000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e60001b"], 0x30}}, 0x0) 20:47:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/60) 20:47:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) 20:47:33 executing program 2 (fault-call:4 fault-nth:1): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) 20:47:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x840000, 0x0) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000)) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) [ 651.396685][T21905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 651.404641][T21905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 651.412583][T21905] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 651.420526][T21905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.428506][T21905] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000964001b"], 0x30}}, 0x0) [ 651.494922][T21939] FAULT_INJECTION: forcing a failure. [ 651.494922][T21939] name failslab, interval 1, probability 0, space 0, times 0 [ 651.513548][T21939] CPU: 1 PID: 21939 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 651.523721][T21939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.533767][T21939] Call Trace: [ 651.537058][T21939] dump_stack+0x1dd/0x24e 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c64001b"], 0x30}}, 0x0) 20:47:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x4000, &(0x7f00000001c0)={'trans=virtio,', {[{@cachetag={'cachetag', 0x3d, '}/'}}, {@dfltgid={'dfltgid', 0x3d, 0xee01}}, {@noextend='noextend'}, {@aname={'aname', 0x3d, '!/@'}}, {@access_any='access=any'}, {@cache_fscache='cache=fscache'}, {@afid={'afid', 0x3d, 0x100}}], [{@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', 0xee00}}, {@uid_lt={'uid<'}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x0, 0x62, 0x66, 0x63, 0x38, 0x64, 0x38], 0x2d, [0x37, 0x61, 0x36], 0x2d, [0x64, 0x62, 0x1, 0x34], 0x2d, [0x31, 0x37, 0x61, 0x61], 0x2d, [0x37, 0x63, 0x32, 0x34, 0x62, 0x64, 0x0, 0x66]}}}]}}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:33 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000140)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x303142) sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000400)="eee696f4d50b62217447afb636d551ba0f9d30858d2e3f0788199310fafa33260cd2360b3514417c0b5c9e9244c124ab6bbbf9f543d29fca0aaf0476cee0646d770fb7238f2db47c0f3ee219", 0x4c}], 0x1, 0x0, 0x0, 0x20008000}, 0x40014) lsetxattr$security_ima(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='security.ima\x00', &(0x7f0000000540)=@sha1={0x1, "c732cc2373b5c744d05b80bf2a604ce825b6f9cc"}, 0x15, 0x1) r2 = accept4$bt_l2cap(r1, &(0x7f0000000580)={0x1f, 0x0, @fixed}, &(0x7f00000005c0)=0xe, 0x80000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000c00)={r1}, 0x8) write$nbd(r3, &(0x7f0000007b00)={0x67446698, 0x0, 0x1, 0x1, 0x3, "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"}, 0x1010) r4 = clone3(&(0x7f0000007280)={0x58300, &(0x7f0000000140), &(0x7f0000007080), &(0x7f00000070c0), {0x27}, &(0x7f0000007100)=""/148, 0x94, &(0x7f00000071c0)=""/96, &(0x7f0000007240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) r5 = fcntl$getown(r1, 0x9) tgkill(r4, r5, 0xb) recvmmsg(r2, &(0x7f0000005dc0)=[{{&(0x7f0000000600)=@ll, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)=""/187, 0xbb}, {&(0x7f0000007300)=""/161, 0xa1}], 0x2, &(0x7f0000000840)=""/9, 0x9}, 0x6}, {{&(0x7f0000000880)=@x25, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000900)=""/58, 0x3a}, {&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000980)=""/77, 0x4d}, {&(0x7f0000008b40)=""/260, 0x104}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000007a00)=""/253, 0xfd}, {&(0x7f0000000d00)=""/23, 0x17}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x8}, 0x100}, {{&(0x7f0000001dc0)=@hci, 0x80, &(0x7f0000003000)=[{&(0x7f0000001e40)=""/80, 0x50}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/247, 0xf7}, {&(0x7f0000002fc0)=""/20, 0x14}], 0x4, &(0x7f0000003040)=""/254, 0xfe}, 0x20}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003140)=""/12, 0xc}], 0x1}, 0x3}, {{&(0x7f00000031c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000007940)=[{&(0x7f0000000780)=""/117, 0x75}, {&(0x7f00000073c0)=""/205, 0xcd}, {&(0x7f00000074c0)=""/74, 0x4a}, {&(0x7f0000007540)=""/174, 0xae}, {&(0x7f0000007600)=""/75, 0x4b}, {&(0x7f0000007680)=""/156, 0x9c}, {&(0x7f0000005340)=""/43, 0x2b}, {&(0x7f0000007740)=""/92, 0x5c}, {&(0x7f00000077c0)=""/120, 0x78}, {&(0x7f0000007840)=""/239, 0xef}], 0xa, &(0x7f0000003280)=""/114, 0x72}, 0x4e1}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003300)=""/203, 0xcb}, {&(0x7f0000003400)=""/220, 0xdc}, {&(0x7f0000003500)=""/76, 0x4c}, {&(0x7f0000003580)=""/65, 0x41}, {&(0x7f0000003600)=""/152, 0x98}, {&(0x7f00000036c0)=""/99, 0x63}, {&(0x7f0000003740)=""/187, 0xbb}, {&(0x7f0000003800)=""/165, 0xa5}, {&(0x7f00000038c0)=""/229, 0xe5}, {&(0x7f00000039c0)=""/188, 0xbc}], 0xa, &(0x7f0000003b40)=""/65, 0x41}, 0x81}, {{&(0x7f0000003bc0)=@xdp, 0x80, &(0x7f0000005280)=[{&(0x7f0000003c40)=""/129, 0x81}, {&(0x7f0000003d00)=""/253, 0xfd}, {&(0x7f0000003e00)=""/226, 0xe2}, {&(0x7f0000003f00)=""/196, 0xc4}, {&(0x7f0000004000)=""/23, 0x17}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/90, 0x5a}, {&(0x7f00000050c0)=""/108, 0x6c}, {&(0x7f0000005140)=""/133, 0x85}, {&(0x7f0000005200)=""/84, 0x54}], 0xa, &(0x7f0000000740)=""/10, 0xa}, 0x7}, {{&(0x7f0000005380)=@l2, 0x80, &(0x7f00000056c0)=[{&(0x7f0000005400)=""/182, 0xb6}, {&(0x7f00000054c0)=""/239, 0xef}, {&(0x7f00000055c0)=""/7, 0x7}, {&(0x7f0000005600)=""/151, 0x97}], 0x4}, 0x3}, {{&(0x7f0000005700)=@nfc_llcp, 0x80, &(0x7f00000057c0)=[{&(0x7f0000005780)=""/1, 0x1}], 0x1, &(0x7f0000005800)=""/202, 0xca}, 0x3}, {{&(0x7f0000005900)=@ipx, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005980)=""/48, 0x30}, {&(0x7f00000059c0)=""/41, 0x29}, {&(0x7f0000005a00)=""/184, 0xb8}, {&(0x7f0000005ac0)=""/183, 0xb7}, {&(0x7f0000005b80)=""/34, 0x22}, {&(0x7f0000005bc0)=""/138, 0x8a}, {&(0x7f0000005c80)=""/110, 0x6e}], 0x7, &(0x7f0000005d80)=""/57, 0x39}, 0x800}], 0xa, 0x40002000, &(0x7f0000006040)={0x0, 0x3938700}) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000003240)=0x80) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000006080)={{r0}, "80c40fe8a57a0527a825e280e1b0d35bfc6816394d3d9fa80ee04b6e1ab9e2f1e2081ba46b63e81a13435d0ef0ecc6f19ac295702f94ec267c098e172b6bb62b8a9831fea48a7ebb6757cb3113979e9f177af8182e5997d5714c354ea290827bd77306370c6b9232ae9379deab2d9fcf7bea4fd11a3b147b9f8f23419c19659ad9547623424a2bdd9e7e6547278f87c897dc1fd77c7a7bbdf67fa76843501dde372940a3f551a2e641a4fe6c71fc035003f972c070dc3220ea561e964cae02b247413fa050479d6f2d773277416a4d0934f72b374cf5c27ff0001238c04df45d72051968fa5004baaa0127588dc3fb3e6325a6774fdf8bb1794dbe33d961f501fd013b06da9e898b0b791ba1c85b6862f488dea7e92432ebf8e0295fb0f356627b6b7a348579c63d2e487089f4d66f77928caea1ada3271e2c2ff56dcbd564c963c1fc572431c73073bb4082fc104041cd7fa3d515383c4d486b14314818571bd3e7bd61626ca9c559664918467cd397a92469043355a254c61c8d318ddbe2abce7dd34650c301820814cd5905bf8b1ed9de3c5d1718a632a9bc0c413a9fdceaaad9ebd2703cfcdfa6573ba2f6e81b2fc3f9eefd80f02be3a410b2fb86b349ae994dfa1ac3f1818d1d1f2000f0b07215ac5f26eb39e924f72909e4c709c72f8a5e01c5a13c3b0bddb9e134ac330f57692107bc88f0e90a6ac2d8e4bee4544bc37e940203155e520d378e3bbfeeda8fc073d6feebd16a89514acb4590e0b5e5995b5fb161b4a1d063a3b0e14cf3c17d37c5ea993595be4f52d9e7a23d3aa77b96fc4402dd5d2b3626f53fc0fea56b0d61e5177aaf54626a55e879a8a53bde33c105dc67484f1b60e5722aebf6e11b745484e9200b9f0214b8a6a4d564d1286db59fc5c9d5681c6fb698232a7d1d53cd7d6d63ee03da3ce97d8b972bf8c5bceb16b60bdce0e796d30d8a75ee20d8d93ef365a3f1192b07116d2bdca6dd337863f3a2ca31fb691223da771eee5d282582c599e81f1555d86d201c4160bd1a564b4b6a2283683665c7c3768e500b569190c7677dd9411bb8f8025c604a78fc51ed8e9362abb1da93cf4c0ec04455bae8a44fbdf05473e0487e3c645525876df08cd602b2774e336fd9b7c97c4287fb2ebf19918696fe577720c063b5e8a299e81ef03dde5293859979f954003f300136e5debca3bc51bde9dcaf73b3739a5f9b6c0b62201d544ddeed75cf031b7100a3402849e484506d820759c59c8a9ce9387ef0bffe1ea685663f4301162dca3b41a000414d6676788f3a9ce58d91f552821d313f6abb1234a26d5d39cc19280905fdb8955ae0f21924e41c789fa6363830f512da23045386d5cc6ad475f4ec5a060f0d180ccf64500c67e9f6044f7c390bd151426c2f6fd8565a7635ea9b667da675242aa7809a81dc97718082cf8aab327c3ba05250497e18979f5a980340601880b18882602ba20577745dc1bcca0904963d9cb70b186561d69c5c85561538e0063835299eb138576602c0ad434c4e2bb91d1a5627d2396354d9a298611cb1f1513ff7f967437c8f033bd138bf24844df96473bfa6d2b00ff7143eaf726174ee5be0e2600cefbfd72f37401594fb26e63d9c87fb4538f23de5aa09a6e87d5d666f44da5833b364d4b9182aa3536871b6d89c45442bc4a1aeb630dba68c36615fe30348b91a10749ef855d6e27154063dc70395fda2300d7a09564764958851ad8479fbfb2ea4559a8d730faadac614c8bcafd2e1e13780bfc3ff0d20816dd007883fb430700aacc1d4e60d61e3602368bc2c2f0787673054ea22e66ea2a864ea26e2de916b7c508f86c37b007536b9c40b227bb97dca3dc5e0ee924c1ee4f08cc93026bbcc60f0d382f3ddbd42706c832c715bb892d416ff1bdc9010b99adedff3209af498438b3265b13aec105e6d9e80e5a2a2aa41d64bdc12fc168e7a0c299cb655c832871a2f4c5c6a6336e05201c55d925aaf3f5e998ef9b4839c902ae6ffce221ef99caf12fe495ff24982657b56ad222decb84cdece0d196ad3559e579594400295e8ae7e5e2ae34e40ebd1ce6a4624650e68ee6213c759f15372f8476510e7194e0fb214d3cff3d1017fc1d09d447719a1b40a95de8e893c741507b4c9fdfd38575ac7bb5ca88d9e16d3f0ee38c7a97042a4ac191e0db3278aec66202152860ff9a18c157163c18ca4dbd959fc0105e3e5f1511dfa5b3970ecd03dc9d1232f4a1ecdd6a5aed6f2e1c858f0c1dd0c9d552ba5b64b49b8dd7823bf16e1a85618db5313b1ae719b5f609b64cd5a1a9372eb3d165b22d1c0493e2d7176ed4f096703ce4c474ebf39d3b8e0977ea366386e60e097e8f0cba8e1c0796fc1593afa86310be797c49c4ea6f8d0ebbce3031a244af133ff04eca0e1c10efa74b7bb4ea68a706848501aa045d88e57a298bb0853e7d445f7a5939cd956b0b5da2dae4ca73054ce3f1e9954dceeed7a5835e3ed0b2d52404d98bedd76db4e5ee53114779daacd0689c3ae0831dda5e6ccdf510e4228fdf9097deb384f19d47733d4f18181c480b743a46ff5ef247c90292d24b6502940071b966bb8c85715f6885ed3f8fc34883b8cdf90090513360198f978a30410819f8d99a5bbf7734f99607900923d0d5fd8678a32571ac0d84627d30dd75e9f4384689bd0570a0109ff4ff43cf925de688ea5e2e64cc0bf75e7358210cbc2e5cd0c12273c5185f29dd02448d38df43bc0d16a6be3a8662331e5f2edca95b3180522e7b2a12d5f5f92aecaaf049e0ebc8e7c6565b6278df2207b99f49d5ef151cb47b4246317b7d4539a803e4f10d1866eee744401fd00103702b69f8b41a75670b367cd174ed7787e18605803050b05c902534ce21ecfbf5db4d93cde37a489621ae558d1c8720532433d61749210d711ab7868a7ce879005a6459e1a16e68f2c6f19566cc8e7429774d78e3e0bd09e38f31bef655e89c9d6d6c625a24a129ee992d06a6d1a467a293eb661f776dc5c6b495aea4232590d473f879841aa027fb10cf28598e57fa4ac3e67482594e75841d099d9fe92e4aedce2594bf542dd0bd0baaba03d1fbdad90b2b107a53f15e1b2a4b1c0fd2e334e4b8e92015570e320e1761cb423c02089e248c79a44e271062cb6d1584e008efac46009e54277894cd2ea9e37250065bb639668e9fd0561bf9d1395735e37d0976bd23ee777be70b11e56df40ede3bd797ff85bf19a1272b33e0777041cbe46a7643bfb63732850fc38c9073fecc4e0deb9d16c948a84c115f1ab6afff817a0015dd5dbf96ac879e51d09510b0481253745e0d4f3ebc1473b5d6b8db3ab49b6d4bcf0aabb7c493922de868bdaccdb3ad827bb07db9c3ff5dfa472567e739ff7eb61f51e0870399ed95574c64522924c2e857b137919c26e8337f4b1617b870afb35d56c8cff76bd275f5c660591c6e9f9a565402c44f17765465d993caa4232f4af29ac2aabaa509780403e567bf5a282e7ab079293927d43f848014e0c3e81f9d00a1bd572a282b48b9451a2af580297fa135446de6856f1da78cc8484e6bfdaa3991979b4c0ea2fcbaf3ad2c5e42a6e68901a11756cf9308288c2c2e85306ef5e71e526874e2a77d526ba19327c1dd9552eea000182e4de799e2fbd667ab6005953c609f37cd58d5da5d0ce16afebf49cde142a093b4ee7d3914d520805915c3afc7f5f359218b7eec539a50182c235ec1c49aec1884f032531d26df99b9a988d00f8e51241c858f989ca2846e6a42a2f9e56929a8111af85cddc6e14aa2252d4ca192d8f00519af3504b1d2962caa1700c64aa98cf14f61a7b4bcb641b8fbfcf6c8ae276568f60f716c80657f1bd5b32668ba3a08806bbe1da2a8189d502eac16f44483c96122f4feace9a338be22d38385341695afac385246d50349407df79535f4988bc7326ac861909a44193508d54a1bfb8caa19cd47d703800f93275fcfa917082588cdaa79f3de68309dde937260c2908f855572ea77e0919c076e2395f142d778bceb7c818d554bdcc361a97c23cc40e543c73a0f3192e05e64757c6dac58be97aed6c3eb2d13a35c67e105496ed1a71a74557be66c95663472a2670e880bcd6118487cc2c71bf32d979546af995836ad357b9036489c33fe7e701000b98c15b13662eb8d6d9e1f039e16732a9be05efd73caf068104f666e03787921ac7e0f4d1f2f37ca65518a79ef3b67bd74727226b3634d34e953ba64fdd1e50516efbdd3e615c30a7204d13d5038865d5e85e0bab1a4923004b49223e871703a4c452b726815920eb29ff161e8dad44ba80a33b0021b98345c2c34cd6354379397e4c69086222dd12d3ec2da27b1a21048d2502ff9b8523a9ee4a240402aef352fb7ecb8bade0eb7f492e621b5871f68ea5f395cd7da92f949c593b7da7d9b4b03bf084f9840723dbc5de132f54b0e7e1ec3bf8e2ab70f50075ba8e3cb5dc8239bc74689c1f1b7d797ffcd2812080545be8813fbbf0fe26fbe9d83ae8dad3a7300389ff3f60b45fd3339f732adb83e01436a1fdaafa3ac00629e1e681951c64b208f397088e2a7440260579281623a4dbc8886843d417254e144fb3423781b774bc5968eac32fbe9d76dc214a790cbda7e4097deeeee72a0c1634f73528d8527f03785f5d450d9a6f1e75acece0f724674f5c21cc1d9cd46cb78d1ba6dd5d19ce9df7f9cb6119d04b4c19b5093268a904dd1ed470c443fc07935cc1308d3d89654dcabc152eeb70f14322d606313be7469464d8c54f320458cf7dc269fad2c555d82eaf09f4292f499e419acfcd342d556ff4ba269558859313c6d845a551ab79516e9385bd520f33e6f8c36c25ec038e62c56dbdf34dc2fc8298bd49645adf6988600c0e72b816fb50a6a570037196e3f412dd3bb300a878023886ba81a25ea69f1f1bea1639ed91415fa76492e9b351cc799bdd604d903e968a4da44f870c24989f9aedcba143960e46282d96a17a4df7272dbfa4c7944760b6c4094c791755693f1ce31ca7bd03ee076ed99d5a811184f24f9b0c4c8e9e668456e3747211ec48432e13bf99432a845e2c0e5d593460f5bf6330ff35676587f268922783b917ffbb5d36cdf4eb1d54a632c5b8f21272c35875d65e52ebbb3a66605d1e35e0ab984c8b5a1f6f1d2e58e69b4f163e8c45f8132ed0c2786ef20cea17d012466eaba2d9fc1d48736b58804169535fc655389f546d2f0ae0fcfe7d0afcc61a193ffe0d2e511a9ddecc0b2ae5b415ba5ae8845c1e2e8ab7a24db3548c244c49b722d2d4790b6243d7dc6d571568db6a68834ae19802c65b0c39624ccf9b5d4114236fc63416baf8ddc7103a690c6e24a4e3f5a5d85a8aebf19c2c6f482f03013ed27dd6f7678e74039ac7e7d3e0a08d2c8d4ef666e9171ddcade6e5d48803f5010c8a051cfbdec5808cb5a4dfad6d07184eda75b187022ae4e8587938a0638f14cdf1ba5da9275fbdd2de42a93ce29ee52b9e207da94b1df70101514cdc5a9e0b7215eb22b5bae4f8c10931e7524054429c2f08ba18a9f7f3dcd4bc738c79ac300d293cf2de90e992c4ba0cc1f34a38bb4a4cca7749c160457afeb54172f691e92ca2025b699c1a7ad2402053112e02015fd463e6f4a04ca2379c88ed4faee77fafc1b20b2722b3e7ebebf4ef5bf181770d91c68fa0a0bac86bf0332f5a0e2c16e1d4b8751dc0196b3f205a103bc14a44a3863534f20907bbd949a8f7b270c8040d6b55b2e6cc4301ededd314b832759722c78fb4321a8e1c7c9d006d8e61"}) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e64001b"], 0x30}}, 0x0) [ 651.541381][T21939] ? devkmsg_release+0x11c/0x11c [ 651.546315][T21939] ? show_regs_print_info+0x12/0x12 [ 651.551509][T21939] ? terminate_walk+0x382/0x4f0 [ 651.556342][T21939] ? filename_parentat+0x2d4/0x860 [ 651.561435][T21939] should_fail+0x6fb/0x860 [ 651.565843][T21939] ? setup_fault_attr+0x3d0/0x3d0 [ 651.570855][T21939] ? kern_path_locked+0x590/0x590 [ 651.575864][T21939] ? __d_alloc+0x2a/0x6b0 [ 651.580180][T21939] should_failslab+0x5/0x20 [ 651.584673][T21939] kmem_cache_alloc+0x36/0x270 [ 651.589425][T21939] ? check_preemption_disabled+0x9e/0x330 [ 651.595134][T21939] __d_alloc+0x2a/0x6b0 [ 651.599290][T21939] d_alloc+0x45/0x1c0 [ 651.603264][T21939] __lookup_hash+0xc8/0x240 [ 651.607860][T21939] filename_create+0x20b/0x740 [ 651.612645][T21939] ? __check_object_size+0x2e5/0x3b0 [ 651.617899][T21939] ? kern_path_create+0x40/0x40 [ 651.622720][T21939] do_mkdirat+0xbc/0x330 [ 651.627023][T21939] ? vfs_mkdir+0x5f0/0x5f0 [ 651.631408][T21939] do_syscall_64+0xcb/0x150 [ 651.635881][T21939] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 651.641741][T21939] RIP: 0033:0x45e149 [ 651.645604][T21939] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 651.665181][T21939] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 651.673678][T21939] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 651.681619][T21939] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 20:47:33 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x9000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c68001b"], 0x30}}, 0x0) 20:47:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) 20:47:33 executing program 2 (fault-call:4 fault-nth:2): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) [ 651.689559][T21939] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 651.697587][T21939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.705525][T21939] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e68001b"], 0x30}}, 0x0) 20:47:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c6c001b"], 0x30}}, 0x0) [ 651.751133][T21964] 9pnet_virtio: no channels available for device syz [ 651.767257][T21971] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 651.773272][T21964] 9pnet_virtio: no channels available for device syz 20:47:33 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0xca040, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e6c001b"], 0x30}}, 0x0) [ 651.799048][T21972] FAULT_INJECTION: forcing a failure. [ 651.799048][T21972] name failslab, interval 1, probability 0, space 0, times 0 [ 651.806927][T21971] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 651.839379][T21972] CPU: 1 PID: 21972 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b70001b"], 0x30}}, 0x0) 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c70001b"], 0x30}}, 0x0) [ 651.849623][T21972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.859664][T21972] Call Trace: [ 651.862950][T21972] dump_stack+0x1dd/0x24e [ 651.867272][T21972] ? devkmsg_release+0x11c/0x11c [ 651.872201][T21972] ? show_regs_print_info+0x12/0x12 [ 651.877395][T21972] ? unwind_get_return_address_ptr+0xa0/0xa0 [ 651.883368][T21972] should_fail+0x6fb/0x860 [ 651.887775][T21972] ? setup_fault_attr+0x3d0/0x3d0 [ 651.892796][T21972] ? check_preemption_disabled+0x9e/0x330 [ 651.898506][T21972] ? __d_alloc+0x2a/0x6b0 [ 651.902826][T21972] should_failslab+0x5/0x20 [ 651.907327][T21972] kmem_cache_alloc+0x36/0x270 [ 651.912094][T21972] __d_alloc+0x2a/0x6b0 [ 651.916241][T21972] ? stack_trace_save+0x1f0/0x1f0 [ 651.921250][T21972] d_alloc_parallel+0xf3/0x1360 [ 651.926092][T21972] ? avc_has_perm_noaudit+0x37d/0x400 [ 651.931499][T21972] ? avc_has_perm_noaudit+0x30c/0x400 [ 651.936839][T21972] ? avc_denied+0x1c0/0x1c0 [ 651.941315][T21972] ? stack_trace_save+0x120/0x1f0 [ 651.946341][T21972] ? d_hash_and_lookup+0x1e0/0x1e0 [ 651.951440][T21972] ? selinux_inode_permission+0x386/0x6b0 [ 651.957122][T21972] ? selinux_inode_permission+0x461/0x6b0 [ 651.962851][T21972] ? __rcu_read_lock+0x50/0x50 [ 651.967582][T21972] __lookup_slow+0x14f/0x450 [ 651.972145][T21972] ? lookup_one_len+0x2c0/0x2c0 [ 651.976973][T21972] ? generic_permission+0x13a/0x490 [ 651.982158][T21972] lookup_one_len+0x17f/0x2c0 [ 651.986802][T21972] ? lookup_one_len_common+0x440/0x440 [ 651.992227][T21972] ? blk_crypto_keyslot_evict+0x160/0x160 [ 651.997914][T21972] incfs_lookup_dentry+0x5b/0xb0 [ 652.002820][T21972] dir_lookup+0x35f/0x8e0 [ 652.007116][T21972] ? read_single_page+0x9d0/0x9d0 [ 652.012114][T21972] ? _raw_spin_lock+0xa3/0x1b0 [ 652.016845][T21972] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 652.022184][T21972] ? _raw_spin_unlock+0x49/0x60 [ 652.027001][T21972] ? d_alloc+0x18a/0x1c0 [ 652.031211][T21972] __lookup_hash+0x115/0x240 [ 652.035768][T21972] filename_create+0x20b/0x740 [ 652.040499][T21972] ? __check_object_size+0x2e5/0x3b0 [ 652.045749][T21972] ? kern_path_create+0x40/0x40 [ 652.050573][T21972] do_mkdirat+0xbc/0x330 [ 652.054786][T21972] ? vfs_mkdir+0x5f0/0x5f0 [ 652.059180][T21972] do_syscall_64+0xcb/0x150 [ 652.063651][T21972] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 652.069510][T21972] RIP: 0033:0x45e149 [ 652.073372][T21972] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.092943][T21972] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 20:47:33 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r0, r0, &(0x7f0000000240), 0x7fff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r0], 0x24}}, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000004c0)={0x20, "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"}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x134, r3, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1fc}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="368662716e150ff83e1fba4a60256a11d7b850955c726802a20908a91e098efb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a1f9a7a51e7abbc9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cd34b4c7ab81f2e2d91e4356f97e43a9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "732a1c647f1556f0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3dd715ec4673bc1e57c1600be11a6734"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5f95dc08fcec2bec1b1852f2bb125ac31e6972a069309f4c7d75a6fcb216f453"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf4e543137652933"}]}, @NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="28881ee6ccc244f86aecc82715a17a2daccfc8fa8fdaaf76"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="039c46f0c49aaba009085549b09eae720f28ce340a7671f5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="25a3b73095db880b80e7141645dda878"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="67b3d33da281d6367935796d17f566d6"}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') 20:47:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e70001b"], 0x30}}, 0x0) 20:47:33 executing program 2 (fault-call:4 fault-nth:3): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x100) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3e0, 0x20000) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=""/233, 0xe9) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:33 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 652.101351][T21972] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 652.109296][T21972] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 652.117247][T21972] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 652.125185][T21972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 652.133124][T21972] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c [ 652.142596][T21972] incfs_lookup_dentry err:-12 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c74001b"], 0x30}}, 0x0) [ 652.178654][T21996] __nla_validate_parse: 44 callbacks suppressed [ 652.178660][T21996] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.197364][T22001] FAULT_INJECTION: forcing a failure. [ 652.197364][T22001] name failslab, interval 1, probability 0, space 0, times 0 [ 652.209330][T22007] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:34 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x3, 0x0, 0x0, 0x208000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000380)={0x3, 0x1000, "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"}) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 652.229518][T22007] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 652.248959][T22001] CPU: 1 PID: 22001 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 652.254580][T22012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.259112][T22001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.259116][T22001] Call Trace: [ 652.259132][T22001] dump_stack+0x1dd/0x24e [ 652.259146][T22001] ? devkmsg_release+0x11c/0x11c [ 652.290894][T22001] ? __lookup_slow+0x340/0x450 [ 652.295628][T22001] ? show_regs_print_info+0x12/0x12 [ 652.300796][T22001] ? lookup_one_len+0x2c0/0x2c0 [ 652.305622][T22001] ? generic_permission+0x13a/0x490 [ 652.310789][T22001] should_fail+0x6fb/0x860 [ 652.315177][T22001] ? setup_fault_attr+0x3d0/0x3d0 [ 652.320171][T22001] ? up_write+0x187/0x280 [ 652.324468][T22001] ? up_read+0x10/0x10 [ 652.328504][T22001] ? dir_lookup+0x433/0x8e0 [ 652.332978][T22001] should_failslab+0x5/0x20 [ 652.337452][T22001] kmem_cache_alloc_trace+0x39/0x290 [ 652.342707][T22001] dir_lookup+0x433/0x8e0 [ 652.347006][T22001] ? read_single_page+0x9d0/0x9d0 [ 652.351998][T22001] ? _raw_spin_lock+0xa3/0x1b0 [ 652.356728][T22001] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 652.362067][T22001] ? _raw_spin_unlock+0x49/0x60 [ 652.366884][T22001] ? d_alloc+0x18a/0x1c0 [ 652.371093][T22001] __lookup_hash+0x115/0x240 [ 652.375650][T22001] filename_create+0x20b/0x740 [ 652.380385][T22001] ? __check_object_size+0x2e5/0x3b0 [ 652.385639][T22001] ? kern_path_create+0x40/0x40 [ 652.390454][T22001] do_mkdirat+0xbc/0x330 [ 652.394672][T22001] ? vfs_mkdir+0x5f0/0x5f0 [ 652.399053][T22001] do_syscall_64+0xcb/0x150 [ 652.403528][T22001] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 652.409387][T22001] RIP: 0033:0x45e149 [ 652.413261][T22001] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.432842][T22001] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 652.441237][T22001] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 652.449178][T22001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 652.457139][T22001] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 652.465099][T22001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 20:47:34 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xb000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e74001b"], 0x30}}, 0x0) [ 652.473055][T22001] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:34 executing program 2 (fault-call:4 fault-nth:4): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in=@local, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x49, 0x2, {{'ecb(cipher_null)\x00'}, 0x8, '9'}}]}, 0x13c}}, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 652.517188][T22019] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.555250][T22027] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 652.585145][T22028] FAULT_INJECTION: forcing a failure. [ 652.585145][T22028] name failslab, interval 1, probability 0, space 0, times 0 [ 652.593646][T22027] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 652.597777][T22028] CPU: 0 PID: 22028 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 652.621843][T22028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.631882][T22028] Call Trace: [ 652.635158][T22028] dump_stack+0x1dd/0x24e [ 652.639475][T22028] ? devkmsg_release+0x11c/0x11c [ 652.644400][T22028] ? unwind_next_frame+0x1aa9/0x1f30 [ 652.649690][T22028] ? show_regs_print_info+0x12/0x12 [ 652.654871][T22028] ? arch_stack_walk+0xde/0x140 [ 652.659710][T22028] should_fail+0x6fb/0x860 [ 652.664114][T22028] ? setup_fault_attr+0x3d0/0x3d0 [ 652.669172][T22028] ? ebitmap_cmp+0x1c8/0x230 [ 652.673745][T22028] ? mls_compute_context_len+0x81b/0x850 [ 652.679358][T22028] ? context_struct_to_string+0x3de/0x820 [ 652.685064][T22028] should_failslab+0x5/0x20 [ 652.689556][T22028] __kmalloc+0x5f/0x2d0 [ 652.693701][T22028] context_struct_to_string+0x3de/0x820 [ 652.699228][T22028] ? security_bounded_transition+0x560/0x560 [ 652.705189][T22028] ? ebitmap_contains+0x6d8/0x780 [ 652.710199][T22028] ? hashtab_search+0x1bf/0x200 20:47:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x400, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='incremental-fs\x00', 0x8c2a, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 20:47:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$getenv(0x4201, r0, 0xd32, &(0x7f0000000080)) 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c78001b"], 0x30}}, 0x0) 20:47:34 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_xfrm(0x10, 0x3, 0x6) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x60000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) writev(r0, &(0x7f0000001680)=[{&(0x7f00000001c0)="c84761cec9c70a76809c7ad0b967e89ae26d84cb14adc3779967688ef94a4be1013690ee1753eef42c4a705ec5332633c2c0e7a75f8385042596f1417f92eb1f129f7a54880c4d0f947adacc", 0x4c}, {&(0x7f0000000240)="9658c1ec9385a12b12375a078b52000b51d003107c83aec0bfb9ae31f6758c53c30c2cdc76034cb8bc5296220d247c", 0x2f}, {&(0x7f0000000380)="185501986b65c9c446cb64c4ef01c27655dd4fc2a5154b8cd3e26e7f34979a1e38c739b18b155da423f7f9175b72fa3fb5985732e030b72b2af4180fe8e0fd4158fcf1d06e9e562dfd043995c0f038e4ea514de6a99fb6b32ca9952e59655ac9d93ac8a7a23714d26ed31e932ff9faf6442fb185203856977939ea4da10fbaed27bbac55b1eee4cf123ab15175837cdfb6b4f1ba0710eae8914f7b2a", 0x9c}, {&(0x7f0000000440)="e477312d2e2d21dbb21f9b2f81e969943c0791187889b18d2414786f873446941e0d3d13e62c0efa6a7f924b866d19d01d49ddb36257f90a17b646fe4079a0d5b38e0a66211294632f94851f29a4a6d2f25024355c21036e5214e41ef31d5f8fbd73bbf9875c4640d52c99", 0x6b}, {&(0x7f00000004c0)="f612adb0405c9e8cebd09af2ac6c47bced959ad608e6a146c0739324dc21c5778b69e76ed99ee170ea27bde0f64cc801b9d1cd474aed74e57ee379af07d1b8451a9d9fc08857cd3db5ede6be532b6aeb93ec9f2608e3e44b082f", 0x5a}, {&(0x7f0000000540)="c8a1d16810933e7606a7c5590a3e9b9027fc5f17d9223bf75970e09757c5697d2a47f0561992f2459e29c35d7ea6051b61c21ed77d6e4b83406cd8fd1276b6a3a99ef7676e75b725f6f2383e8b04f1c8a3075482d787b40eace67f890bbb694b56e32e78b860818d82c19e3aba", 0x6d}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="03993370dd6be96d10295cdcadfb77361e987e31322daa980df9b2bacc7e511413544f510b8a46693db04af3721a819adc92c8773b48c1bcc59489176e20105ece63435e837de1bb8c077d0d406cf6ff45a0332feed756756f781c2e27687a83f183a8fdbaf38018216a9a5c59c3a1014858679fa26cd106cf20b6ae2c09a0dd6b45427ff56f5ae8b27e1d2bed3199", 0x8f}], 0x8) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000040)) [ 652.715045][T22028] context_add_hash+0x13f/0x270 [ 652.719889][T22028] ? security_sid_to_context_inval+0x40/0x40 [ 652.725858][T22028] ? mls_context_isvalid+0x98/0x380 [ 652.731050][T22028] ? policydb_context_isvalid+0x1b6/0x400 [ 652.736764][T22028] security_compute_sid+0x11dc/0x1d50 [ 652.742131][T22028] ? __rcu_read_lock+0x50/0x50 [ 652.746886][T22028] ? security_transition_sid+0x90/0x90 [ 652.752333][T22028] ? avc_denied+0x1c0/0x1c0 [ 652.756829][T22028] ? avc_has_perm_noaudit+0x400/0x400 [ 652.762188][T22028] security_transition_sid+0x78/0x90 20:47:34 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/33) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x8, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xdcd, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0x9}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xffff0000, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0x1, {0x7, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x20000004, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x4, r3, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r5, r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}], [{@euid_gt={'euid>', r0}}, {@smackfsdef={'smackfsdef'}}, {@euid_lt={'euid<', r1}}, {@obj_role={'obj_role'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r2}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e78001b"], 0x30}}, 0x0) [ 652.767463][T22028] may_create+0x64b/0x9a0 [ 652.771784][T22028] ? show_sid+0x250/0x250 [ 652.776104][T22028] ? from_kgid+0x206/0x350 [ 652.780510][T22028] ? make_kgid+0x3a0/0x3a0 [ 652.782080][T22045] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.784913][T22028] ? filename_create+0x4bd/0x740 [ 652.784919][T22028] ? generic_permission+0x13a/0x490 [ 652.784931][T22028] security_inode_mkdir+0xa6/0x130 [ 652.809358][T22028] vfs_mkdir+0x34e/0x5f0 [ 652.813595][T22028] do_mkdirat+0x1f0/0x330 20:47:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480)='/dev/hwrng\x00', 0x8c882, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000014c0)=0x6, 0x4) 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c7c001b"], 0x30}}, 0x0) 20:47:34 executing program 2 (fault-call:4 fault-nth:5): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) [ 652.817920][T22028] ? vfs_mkdir+0x5f0/0x5f0 [ 652.822337][T22028] do_syscall_64+0xcb/0x150 [ 652.826837][T22028] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 652.828125][T22048] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.832712][T22028] RIP: 0033:0x45e149 [ 652.832721][T22028] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 652.832725][T22028] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 652.832732][T22028] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 652.832736][T22028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 652.832740][T22028] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 652.832752][T22028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 652.864802][T22050] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e7c001b"], 0x30}}, 0x0) [ 652.865600][T22028] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 652.968686][T22060] overlayfs: unrecognized mount option "euid>00000000000000016384" or missing value [ 652.984283][T22062] FAULT_INJECTION: forcing a failure. [ 652.984283][T22062] name failslab, interval 1, probability 0, space 0, times 0 [ 652.987121][T22065] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 652.996999][T22062] CPU: 0 PID: 22062 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 653.016293][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.019601][T22060] overlayfs: unrecognized mount option "euid>00000000000000016384" or missing value [ 653.026334][T22062] Call Trace: [ 653.026350][T22062] dump_stack+0x1dd/0x24e [ 653.026359][T22062] ? devkmsg_release+0x11c/0x11c [ 653.026367][T22062] ? unwind_next_frame+0x1aa9/0x1f30 [ 653.026375][T22062] ? show_regs_print_info+0x12/0x12 [ 653.026385][T22062] ? arch_stack_walk+0xde/0x140 [ 653.026395][T22062] should_fail+0x6fb/0x860 20:47:34 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:34 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000000)=0x1000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x504000, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:34 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:34 executing program 5: ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000080)={0x9, 0x9, 0x8, 0x32f, 0x3, "a67a97c64d9383d69229274e7ceec7f35828cc", 0x7, 0x79ca}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x610481, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x5d0, 0x2d8, 0x2d8, 0xffffffff, 0x3b8, 0x2d8, 0x500, 0x500, 0xffffffff, 0x500, 0x500, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x3c, 0x3f, 0x8, 0x6, 0x3, 0x40, 0x1081}}, @common=@hbh={{0x48, 'hbh\x00'}, {0xb9cc, 0x1, 0x0, [0x20, 0xfe01, 0x7, 0x1, 0x5, 0x3ff, 0x9, 0x400, 0x3, 0x2666, 0x3, 0xc80, 0x4, 0x1, 0x4, 0x100], 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv4=@multicast2, @ipv6=@mcast1, @port=0x4e23, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x138, 0x170, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x2e, 0x63, 0x7, 0x7f, 0xac20, @private1, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xff, 0x0, 0xffffffff, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xff], [0xffffffff, 0xff, 0xff, 0xff000000], 0x3d, 0x100}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xff, 0x5, 0x4}, {0xffffffffffffffff, 0x2, 0x3}, {0x0, 0x2}, 0x780, 0x7}}}, {{@ipv6={@private1={0xfc, 0x1, [], 0x1}, @mcast2, [0xff, 0xffffff00, 0xff000000, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x89, 0x0, 0x6a}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x2}, {0x0, 0x0, 0x4}, {0x0, 0x3, 0x4}, 0x8000, 0x10001}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, [], 0x1}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xff000000, 0xff, 0xffffffff, 0xffffffff], 'dummy0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x3a, 0x8, 0x1, 0x4}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d2, 0x4d2], 0x6, 0x9, 0x2}}, @common=@hl={{0x28, 'hl\x00'}, {0x3, 0x99}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6=@dev={0xfe, 0x80, [], 0x44}, @ipv6=@private1, @gre_key=0x26c, @gre_key=0x7f}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c80001b"], 0x30}}, 0x0) 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e80001b"], 0x30}}, 0x0) [ 653.026405][T22062] ? setup_fault_attr+0x3d0/0x3d0 [ 653.026414][T22062] ? ebitmap_cmp+0x1c8/0x230 [ 653.026423][T22062] ? mls_compute_context_len+0x81b/0x850 [ 653.026429][T22062] ? context_struct_to_string+0x3de/0x820 [ 653.026436][T22062] should_failslab+0x5/0x20 [ 653.026444][T22062] __kmalloc+0x5f/0x2d0 [ 653.026451][T22062] context_struct_to_string+0x3de/0x820 [ 653.026461][T22062] ? security_bounded_transition+0x560/0x560 [ 653.026468][T22062] ? ebitmap_contains+0x6d8/0x780 [ 653.026476][T22062] ? hashtab_search+0x1bf/0x200 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c84001b"], 0x30}}, 0x0) 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e84001b"], 0x30}}, 0x0) [ 653.026488][T22062] context_add_hash+0x13f/0x270 [ 653.075742][T22070] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 653.077577][T22062] ? security_sid_to_context_inval+0x40/0x40 [ 653.077592][T22062] ? mls_context_isvalid+0x98/0x380 [ 653.083963][T22070] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 653.088891][T22062] ? policydb_context_isvalid+0x1b6/0x400 20:47:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b88001b"], 0x30}}, 0x0) [ 653.088899][T22062] security_compute_sid+0x11dc/0x1d50 [ 653.088914][T22062] ? __rcu_read_lock+0x50/0x50 [ 653.107876][T22072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.108994][T22062] ? security_transition_sid+0x90/0x90 [ 653.109008][T22062] ? avc_denied+0x1c0/0x1c0 [ 653.126119][T22074] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.137692][T22062] ? avc_has_perm_noaudit+0x400/0x400 [ 653.137715][T22062] security_transition_sid+0x78/0x90 [ 653.137732][T22062] may_create+0x64b/0x9a0 [ 653.158048][T22076] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 653.162809][T22062] ? show_sid+0x250/0x250 [ 653.162819][T22062] ? from_kgid+0x206/0x350 [ 653.162827][T22062] ? make_kgid+0x3a0/0x3a0 [ 653.162833][T22062] ? filename_create+0x4bd/0x740 [ 653.162844][T22062] ? generic_permission+0x13a/0x490 [ 653.254486][T22062] security_inode_mkdir+0xa6/0x130 [ 653.259569][T22062] vfs_mkdir+0x34e/0x5f0 [ 653.263796][T22062] do_mkdirat+0x1f0/0x330 [ 653.268100][T22062] ? vfs_mkdir+0x5f0/0x5f0 [ 653.272498][T22062] do_syscall_64+0xcb/0x150 [ 653.276974][T22062] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.282835][T22062] RIP: 0033:0x45e149 [ 653.286714][T22062] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.306375][T22062] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 20:47:35 executing program 2 (fault-call:4 fault-nth:6): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c88001b"], 0x30}}, 0x0) 20:47:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:iptables_exec_t:s0\x00', 0x25, 0x0) [ 653.314759][T22062] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 653.322710][T22062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 653.330650][T22062] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 653.338600][T22062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 653.346545][T22062] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c [ 653.410926][T22095] FAULT_INJECTION: forcing a failure. [ 653.410926][T22095] name failslab, interval 1, probability 0, space 0, times 0 [ 653.418562][T22099] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 653.432990][T22095] CPU: 1 PID: 22095 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 653.447843][T22095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.456944][T22099] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 653.457889][T22095] Call Trace: [ 653.475219][T22095] dump_stack+0x1dd/0x24e [ 653.479539][T22095] ? devkmsg_release+0x11c/0x11c [ 653.484469][T22095] ? show_regs_print_info+0x12/0x12 [ 653.489658][T22095] ? avc_has_perm+0xd2/0x270 [ 653.494236][T22095] ? avc_has_perm+0x173/0x270 [ 653.498896][T22095] should_fail+0x6fb/0x860 [ 653.503284][T22095] ? setup_fault_attr+0x3d0/0x3d0 [ 653.508276][T22095] ? security_transition_sid+0x78/0x90 [ 653.513704][T22095] ? new_inode_pseudo+0x131/0x240 [ 653.518696][T22095] should_failslab+0x5/0x20 [ 653.523170][T22095] kmem_cache_alloc+0x36/0x270 [ 653.527990][T22095] new_inode_pseudo+0x131/0x240 [ 653.532808][T22095] new_inode+0x25/0x1d0 [ 653.536932][T22095] ? from_kgid+0x206/0x350 [ 653.541316][T22095] ramfs_get_inode+0x27/0x310 [ 653.545966][T22095] ramfs_mkdir+0x4f/0x100 [ 653.550263][T22095] vfs_mkdir+0x420/0x5f0 [ 653.554486][T22095] dir_mkdir+0x3ca/0x7f0 [ 653.558697][T22095] ? dir_unlink+0x830/0x830 [ 653.563169][T22095] ? from_kgid+0x206/0x350 [ 653.567639][T22095] ? make_kgid+0x3a0/0x3a0 [ 653.572105][T22095] ? filename_create+0x4bd/0x740 [ 653.577010][T22095] ? security_inode_mkdir+0xed/0x130 [ 653.582261][T22095] vfs_mkdir+0x420/0x5f0 [ 653.586470][T22095] do_mkdirat+0x1f0/0x330 [ 653.590767][T22095] ? vfs_mkdir+0x5f0/0x5f0 [ 653.595155][T22095] do_syscall_64+0xcb/0x150 [ 653.599646][T22095] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.605515][T22095] RIP: 0033:0x45e149 [ 653.609375][T22095] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.628945][T22095] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 653.637475][T22095] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 653.645414][T22095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 653.653353][T22095] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 20:47:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e88001b"], 0x30}}, 0x0) 20:47:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file1\x00', 0x0) 20:47:35 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x20180, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10440400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000240)={0x650, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x1d, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @tim={0x5, 0x14, {0x6, 0xef, 0xf8, "2512b75c00a01eeaeb204b39dc43d62b60"}}]}, @NL80211_ATTR_IE={0x40, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x7fff, @val=0x49, @void, @void}}, @peer_mgmt={0x75, 0x6, {0x0, 0xfff, @val=0x8, @void, @void}}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x5, 0x0, {0x80000000, 0x40, 0x0, 0x23, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x300, 0x4, 0x5e}}, @cf={0x4, 0x6, {0xff, 0x2, 0x8, 0x8e6}}, @mesh_chsw={0x76, 0x6, {0x80, 0xd7, 0x42, 0x8}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0x400, 0x0, 0x6, 0x0, {0x2, 0xcca, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}, 0x800, 0x10, 0x8}}]}, @NL80211_ATTR_IE={0x338, 0x2a, [@random={0x8, 0xfa, "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"}, @tim={0x5, 0x58, {0x2, 0xeb, 0x54, "a75f0ef5cc384a94cac5fa6a4b9b46c5d64a639d81cb36bdc3f692c31c49ec007b91239fdaa57fb5a76733b9d2e7091a33cba14e8f95f761d39ae9198644654f055326e6c9bd9ed3924120ca877dd77b43a4e28fa6"}}, @cf={0x4, 0x6, {0xa1, 0x20, 0x401, 0x8001}}, @cf={0x4, 0x6, {0x5, 0x1, 0x400, 0x8}}, @perr={0x84, 0x88, {0x1, 0x8, [@ext={{}, @device_b, 0x2, @device_b, 0x2}, @not_ext={{}, @device_b, 0x7, "", 0x2f}, @not_ext={{}, @device_b, 0xffff, "", 0x42}, @ext={{}, @device_a, 0x81, @device_b, 0xd}, @ext={{}, @device_b, 0x315, @device_b, 0x2e}, @ext={{}, @device_a, 0x7, @device_b, 0x7}, @ext={{}, @device_b, 0x8, @device_a, 0x12}, @not_ext={{}, @broadcast, 0x1, "", 0x39}]}}, @measure_req={0x26, 0x64, {0x1, 0x7, 0xee, "91054c2fe6871620ee8506c001e8fe6e287f77338761080f3daa94ea25e033ecb3c42f1271f65eccbd715fad1f2a6c74667251039ada925366c909cac84bc8e7a10d48fab5b7f91aff5250e97935df09ab3e9178041693173e515f96b7ed0d667c"}}, @channel_switch={0x25, 0x3, {0x1, 0x1c2, 0x3f}}, @fast_bss_trans={0x37, 0xd7, {0x81, 0x5, "0bde95717ced6b069ef1949c4beb5803", "68e0a4f8b814e146bd531b7b2c56fb531a05cedb45055b858361f6c9e7a41472", "33c3cd35fb7508ad85b583b4a8911dada5cda600af688a3fddffb5e3beff0d3e", [{0x2, 0x8, "b537975d27f0ce0b"}, {0x1, 0x14, "dfd85aeef5a3e7f8b8cc112eb9e6b17af37faec4"}, {0x1, 0x19, "719884d4b126fc8e899a38ddb37abc5924bf183bd5d6f95c48"}, {0x2, 0x1e, "41096f07f8b1a5772eabfae8871f9f149d948e4533333c540dd1ff1b969c"}, {0x1, 0x28, "2b92f4953932f1e3d1153e1e21c73864a5c3f34c0db071be65a6d08bde93ac2efa1006a7c38919f0"}]}}]}, @NL80211_ATTR_IE={0x264, 0x2a, [@peer_mgmt={0x75, 0x16, {0x1, 0xfffd, @val=0xfffb, @void, @val="e5eb93db6f0e5db2cb314fa01420fb7e"}}, @tim={0x5, 0xe5, {0x30, 0xe2, 0x0, "b39cc23433ce62c500249a3589f669e9aca26f7c406211258382155066a997226505916763f87a718a57ec7026128a7bc8199bb2c911b7a7ba60b331287bcf7357f2efee05ebf6c6103eebae0be8cb32284d071144f3b4b9ae6d5bd80f0ad905cb8f456a15a200b9fa30444b05fe6b558c85a4713742e2a00e7a86016731d56f7f960e244dddf5de35ba3d416db62fdcbf19f0d7397f6b3a95e8200a1ca28b8af6abdef0229c28b3f3fca576dc85cef6f6710bd48b677616ba5219ca22d16b84d13cff4406fd3294eb98fb2a5323ba4a691d0578f2b286fc77d47831c725180de8be"}}, @link_id={0x65, 0x12, {@from_mac, @broadcast}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @gcr_ga={0xbd, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @ssid={0x0, 0x2, @random="74f1"}, @perr={0x84, 0x12f, {0x1c, 0x13, [@not_ext={{}, @device_b, 0x0, "", 0x1}, @ext={{}, @device_a, 0x4, @device_a, 0x14}, @ext={{}, @broadcast, 0x67, @device_b, 0x28}, @ext={{}, @device_b, 0x0, @broadcast, 0x1f}, @not_ext={{}, @device_b, 0x40, "", 0x21}, @ext={{}, @broadcast, 0x0, @broadcast, 0x35}, @not_ext={{}, @broadcast, 0x1, "", 0x35}, @not_ext={{}, @broadcast, 0x4, "", 0x14}, @not_ext={{}, @broadcast, 0x4, "", 0x23}, @ext={{}, @device_a, 0x3ff, @broadcast, 0x3d}, @not_ext={{}, @broadcast, 0x95, "", 0x25}, @not_ext={{}, @broadcast, 0x4, "", 0x37}, @not_ext={{}, @broadcast, 0x9, "", 0xd}, @ext={{}, @device_a, 0x1, @device_a, 0xe}, @ext={{}, @device_b, 0x7fff, @device_b, 0x35}, @not_ext={{}, @device_b, 0x3770, "", 0x24}, @not_ext={{}, @device_b, 0x7fffffff, "", 0x36}, @ext={{}, @device_b, 0xd6, @device_b, 0x8}, @ext={{}, @device_b, 0x7, @broadcast, 0x42}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1ff}]}, 0x650}, 0x1, 0x0, 0x0, 0x4000}, 0x20040090) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r2, 0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) 20:47:35 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:35 executing program 2 (fault-call:4 fault-nth:7): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) [ 653.661293][T22095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 653.669305][T22095] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b8c001b"], 0x30}}, 0x0) 20:47:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x182) [ 653.723004][T22113] FAULT_INJECTION: forcing a failure. [ 653.723004][T22113] name failslab, interval 1, probability 0, space 0, times 0 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e8c001b"], 0x30}}, 0x0) 20:47:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0xdf0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) delete_module(&(0x7f0000000000)=')/\x00', 0xa00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_STATFS(r1, 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ftruncate(0xffffffffffffffff, 0x48280) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x74b000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r4, 0x0, 0x0) io_cancel(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb25d, r4, &(0x7f0000000100)="92ac6b16a2267aa139823aebef3b091b7b099b1e8f593b232a3045fb812b2ab1a19d8f", 0x23, 0x6}, &(0x7f00000001c0)) umount2(&(0x7f0000000040)='./file0\x00', 0x2) 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e90001b"], 0x30}}, 0x0) 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c94001b"], 0x30}}, 0x0) [ 653.769519][T22113] CPU: 0 PID: 22113 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 653.779690][T22113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.789737][T22113] Call Trace: [ 653.793022][T22113] dump_stack+0x1dd/0x24e [ 653.797347][T22113] ? devkmsg_release+0x11c/0x11c [ 653.802277][T22113] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.808337][T22113] ? show_regs_print_info+0x12/0x12 [ 653.813531][T22113] should_fail+0x6fb/0x860 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e94001b"], 0x30}}, 0x0) 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000ca0001b"], 0x30}}, 0x0) [ 653.817938][T22113] ? setup_fault_attr+0x3d0/0x3d0 [ 653.822951][T22113] ? security_inode_alloc+0x32/0x1f0 [ 653.828222][T22113] should_failslab+0x5/0x20 [ 653.832715][T22113] kmem_cache_alloc+0x36/0x270 [ 653.837469][T22113] security_inode_alloc+0x32/0x1f0 [ 653.842569][T22113] inode_init_always+0x37c/0x800 [ 653.847496][T22113] new_inode_pseudo+0x7b/0x240 [ 653.852245][T22113] new_inode+0x25/0x1d0 [ 653.856399][T22113] ? from_kgid+0x206/0x350 [ 653.856413][T22113] ramfs_get_inode+0x27/0x310 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bc0001b"], 0x30}}, 0x0) 20:47:35 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 653.864028][T22128] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 653.865459][T22113] ramfs_mkdir+0x4f/0x100 [ 653.865466][T22113] vfs_mkdir+0x420/0x5f0 [ 653.865481][T22113] dir_mkdir+0x3ca/0x7f0 [ 653.882103][T22128] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 653.883814][T22113] ? dir_unlink+0x830/0x830 [ 653.883822][T22113] ? from_kgid+0x206/0x350 [ 653.883834][T22113] ? make_kgid+0x3a0/0x3a0 [ 653.919521][T22113] ? filename_create+0x4bd/0x740 [ 653.924452][T22113] ? security_inode_mkdir+0xed/0x130 [ 653.929712][T22113] vfs_mkdir+0x420/0x5f0 [ 653.933924][T22113] do_mkdirat+0x1f0/0x330 [ 653.938220][T22113] ? vfs_mkdir+0x5f0/0x5f0 [ 653.942605][T22113] do_syscall_64+0xcb/0x150 [ 653.947076][T22113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.952943][T22113] RIP: 0033:0x45e149 [ 653.956814][T22113] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 653.976396][T22113] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 653.984781][T22113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 653.992726][T22113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 654.000706][T22113] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 654.008644][T22113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 20:47:35 executing program 2 (fault-call:4 fault-nth:8): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bc4001b"], 0x30}}, 0x0) 20:47:35 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:35 executing program 5: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r0, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$binder(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='binder\x00', 0x1084, &(0x7f0000000380)=ANY=[@ANYBLOB='stats=global,stats=global,subj_user=,uid=', @ANYRESDEC=r0, @ANYBLOB=',seclabel,func=KEXEC_KERNEL_CHECK,smackfsroot=,euid=', @ANYRESDEC, @ANYBLOB="2c726f6f74636f6e746578743d737973078c76e68d2d29f0f8edf040111461646d5f752c7375626a5f726f6c653d696e63"]) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 654.016584][T22113] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:35 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6) [ 654.050482][T22151] FAULT_INJECTION: forcing a failure. [ 654.050482][T22151] name failslab, interval 1, probability 0, space 0, times 0 [ 654.075005][T22151] CPU: 0 PID: 22151 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 654.085169][T22151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.095212][T22151] Call Trace: [ 654.098501][T22151] dump_stack+0x1dd/0x24e [ 654.102864][T22151] ? devkmsg_release+0x11c/0x11c [ 654.107788][T22151] ? selinux_inode_getxattr+0x2b1/0x3d0 [ 654.113308][T22151] ? show_regs_print_info+0x12/0x12 [ 654.118475][T22151] ? find_inode+0x40a/0x4c0 [ 654.122947][T22151] ? selinux_inode_post_setxattr+0x510/0x510 [ 654.128898][T22151] ? capable_wrt_inode_uidgid+0x13f/0x1d0 [ 654.134675][T22151] should_fail+0x6fb/0x860 [ 654.139062][T22151] ? setup_fault_attr+0x3d0/0x3d0 [ 654.144053][T22151] ? _raw_spin_lock+0xa3/0x1b0 [ 654.148789][T22151] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 654.154125][T22151] ? is_bad_inode+0x9/0x40 [ 654.158512][T22151] ? __vfs_getxattr+0x15d/0x6e0 [ 654.163341][T22151] ? alloc_inode+0x43/0x80 [ 654.167724][T22151] should_failslab+0x5/0x20 [ 654.172196][T22151] kmem_cache_alloc_trace+0x39/0x290 [ 654.177445][T22151] ? _raw_spin_unlock+0x49/0x60 [ 654.182263][T22151] ? ilookup5+0x18e/0x190 [ 654.186560][T22151] ? get_order+0x30/0x30 [ 654.190771][T22151] ? incfs_handler_setxattr+0x2b0/0x2b0 [ 654.196290][T22151] alloc_inode+0x43/0x80 [ 654.200500][T22151] ? get_order+0x30/0x30 [ 654.204709][T22151] iget5_locked+0xa2/0x3e0 [ 654.209092][T22151] ? inode_test+0x1a0/0x1a0 [ 654.213562][T22151] dir_mkdir+0x6ac/0x7f0 [ 654.217791][T22151] ? dir_unlink+0x830/0x830 [ 654.222265][T22151] ? from_kgid+0x206/0x350 [ 654.226651][T22151] ? make_kgid+0x3a0/0x3a0 [ 654.231038][T22151] ? filename_create+0x4bd/0x740 [ 654.235943][T22151] ? security_inode_mkdir+0xed/0x130 [ 654.241198][T22151] vfs_mkdir+0x420/0x5f0 [ 654.245411][T22151] do_mkdirat+0x1f0/0x330 [ 654.249708][T22151] ? vfs_mkdir+0x5f0/0x5f0 [ 654.254106][T22151] do_syscall_64+0xcb/0x150 [ 654.258579][T22151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.264440][T22151] RIP: 0033:0x45e149 [ 654.268305][T22151] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.287877][T22151] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bd4001b"], 0x30}}, 0x0) 20:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) open(&(0x7f0000000100)='./file0/file0\x00', 0x80, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)={0x34, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10020000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x20000805) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x20004, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80400, 0x11) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000080)=""/50) [ 654.296256][T22151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 654.304235][T22151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 654.312175][T22151] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 654.320113][T22151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 654.328058][T22151] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000dd4001b"], 0x30}}, 0x0) 20:47:36 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x10000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0xc5de, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:36 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000000080)='./file0/file0\x00', 0x21e6c0, 0x100) r2 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x9, 0x420000) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000380)="79dd4596c5b95aa44c7bb13afcc769ad47e32efb02a034a4fe4ff002c97495fb928dbbd86b5c877d9876f8d195e439afd2827445ae450781f131c002030f3e92b83087ad374bf379cc6f67cc7312882cd73ef3b6f736c7e37527b73495fe1d8fc9f7bace2c142d5d330930db17b0f78009b720720216ac753c34e4f552580cc09c6a4fa41a6f8046a4e309d8a179f699fcc4f70c77e12b47797ca5a53aaf90eb74f3fb51413bcbce7684d1386f78becb36fb28186e88e3d490b56ef6d0752ad418e7", 0xc2}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="b41c72c8ca68404dfca19cc7e7cf91409c8fbe6c85358a3560c283060d22d9531c7dec2be631ec23a5b83e5b616ea16b4eb0d5eeb96bd7abd72dcb055bc09357e75ecda6960cc938989036", 0x4b}], 0x4, 0x80000001, 0x9c) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000000c0)='incremental-fs\x00', &(0x7f0000000100)='./file0/file0\x00', r2) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000008dc001b"], 0x30}}, 0x0) 20:47:36 executing program 2 (fault-call:4 fault-nth:9): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) [ 654.448957][T22183] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 654.463711][T22183] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bdc001b"], 0x30}}, 0x0) 20:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 654.501238][T22190] FAULT_INJECTION: forcing a failure. [ 654.501238][T22190] name failslab, interval 1, probability 0, space 0, times 0 [ 654.543513][T22204] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 654.551979][T22190] CPU: 1 PID: 22190 Comm: syz-executor.2 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 654.567840][T22190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.577892][T22190] Call Trace: [ 654.581180][T22190] dump_stack+0x1dd/0x24e 20:47:36 executing program 4: mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r0, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x368000, &(0x7f0000002340)=ANY=[@ANYBLOB='mode=00000000000000000000061,mode=00000000000000000000005,mode=00000000000000000000002,mode=00000000000000000000003,mode=00000000000000000000777,mode=00000000000000000000037,appraise_type=imasig,euid>', @ANYRESDEC=r0, @ANYBLOB=',uid>', @ANYRESDEC=r1, @ANYBLOB="2c6d6561737572652c6175646974ae832c7365636c6162656c2c7365636c6162656c2c00"]) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) [ 654.582861][T22204] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 654.585499][T22190] ? devkmsg_release+0x11c/0x11c [ 654.585514][T22190] ? show_regs_print_info+0x12/0x12 [ 654.609566][T22190] should_fail+0x6fb/0x860 [ 654.613970][T22190] ? setup_fault_attr+0x3d0/0x3d0 [ 654.619021][T22190] ? security_inode_alloc+0x32/0x1f0 [ 654.624293][T22190] should_failslab+0x5/0x20 [ 654.628783][T22190] kmem_cache_alloc+0x36/0x270 [ 654.633538][T22190] security_inode_alloc+0x32/0x1f0 [ 654.638640][T22190] inode_init_always+0x37c/0x800 [ 654.643568][T22190] ? incfs_handler_setxattr+0x2b0/0x2b0 [ 654.649104][T22190] iget5_locked+0xb9/0x3e0 [ 654.653501][T22190] ? inode_test+0x1a0/0x1a0 [ 654.658000][T22190] dir_mkdir+0x6ac/0x7f0 [ 654.662224][T22190] ? dir_unlink+0x830/0x830 [ 654.666701][T22190] ? from_kgid+0x206/0x350 [ 654.671095][T22190] ? make_kgid+0x3a0/0x3a0 [ 654.675489][T22190] ? filename_create+0x4bd/0x740 [ 654.680393][T22190] ? security_inode_mkdir+0xed/0x130 [ 654.685644][T22190] vfs_mkdir+0x420/0x5f0 [ 654.689897][T22190] do_mkdirat+0x1f0/0x330 [ 654.694195][T22190] ? vfs_mkdir+0x5f0/0x5f0 [ 654.698580][T22190] do_syscall_64+0xcb/0x150 [ 654.703074][T22190] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.708933][T22190] RIP: 0033:0x45e149 [ 654.712798][T22190] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 654.732374][T22190] RSP: 002b:00007fd5a0c62c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 20:47:36 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x11000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x80442, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="04d4d997820afe227191963de6d564ac9d69ab85724b586e5483f550bdfcb23d739eac098348629945c44b147bd8305f7bec6e8f9fa943dba4f9a120f1903957174e2268ab57d2fa0ff46a30bcf670222b110896c0871fe34c4f2c33e594") utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{}, {r2, r3/1000+10000}}, 0x100) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:36 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000280)='fscrypt-provisioning\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)={0x1, 0x0, @c='abcdefghijklmnopqrstuvwxyz0123456'}, 0x29, 0xfffffffffffffffb) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @desc3='\xe8\xda\xb9\x924\xbb1.'}, 0x10, r1, [], @d='abcdefghijklmnop'}) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) pipe2$9p(&(0x7f0000000080), 0x800) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x2, 0x0, [], [{0x1, 0x5, 0x6, 0x1, 0xd8c, 0xfffffffffffffffc}, {0xfffffffb, 0x4, 0x101, 0x7, 0x800, 0x40}], [[], []]}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000100)=0x2c) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000ddc001b"], 0x30}}, 0x0) 20:47:36 executing program 2 (fault-call:4 fault-nth:10): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 654.740778][T22190] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e149 [ 654.748725][T22190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040 [ 654.756666][T22190] RBP: 00007fd5a0c62ca0 R08: 0000000000000000 R09: 0000000000000000 [ 654.764607][T22190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 654.772550][T22190] R13: 00007ffd99d07fff R14: 00007fd5a0c639c0 R15: 000000000119bf8c 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000be4001b"], 0x30}}, 0x0) 20:47:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 20:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='binder\x00', 0x1000820, &(0x7f0000000380)={[{@stats='stats=global'}, {@max={'max', 0x3d, 0x2}}, {@stats='stats=global'}, {@max={'max'}}, {@max={'max', 0x3d, 0x4}}, {@stats='stats=global'}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x2}}, {@stats='stats=global'}], [{@obj_role={'obj_role', 0x3d, 'incremental-fs\x00'}}]}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xc) setxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="2401873216df33f139de4e0dfc519d4c5e00a05a04e3"], 0x16, 0x0) chroot(&(0x7f0000000240)='./file0\x00') 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000be8001b"], 0x30}}, 0x0) [ 654.839527][T22231] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:36 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x12000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x2) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=@sg0='/dev/sg0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='mqueue\x00', 0x800000, &(0x7f00000003c0)='+\\\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bec001b"], 0x30}}, 0x0) 20:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x176) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 654.898076][T22231] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x1, 0x0, [0x8, 0x40, 0x7, 0x120000000000000, 0x15ab, 0x40, 0x375b, 0x3]}) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000008f0001b"], 0x30}}, 0x0) 20:47:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x3) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bf0001b"], 0x30}}, 0x0) 20:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 655.008471][T22271] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:36 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x13000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x4) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000008f4001b"], 0x30}}, 0x0) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="05000a0000000800d3c9bdd8f46f46e1e2476751d3e78654ba5aa874dc9f3c28361db385d73017d77cf95c6cfb8ad9e7eee43c416f419a44e7a3ddde6f010f2ab4541ac0f0968ca40d0847cd3585163b9cf94900b46dec28291839098b3baa51b60b57417fcd16cb72ab95a84e09a175dc33c5cc9ee00d21283cd3b492e80a929fa9142be8f22126e84177b614c0005f62bea55c7f82dc58ebfc1e52812ce35bd1672c977c91576408b784f9e4747bd512d01ee2fa7bce63be67acf9536e50079db660f18f7a29b1896ea42ef92f9e6a84c4ce575562351c08b33e08"], 0xdc, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x28) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000080)='./file0/file0\x00', 0x240800, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_wait(r3, &(0x7f0000000100)=[{}], 0x500, 0x2e0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000500)) lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 655.047349][T22271] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bf4001b"], 0x30}}, 0x0) 20:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x2b) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6b18}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008046}, 0x4001) read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002480)={{{@in6, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x2000a0, &(0x7f0000002580)={[{@nfs_export_on='nfs_export=on'}, {@index_off='index=off'}, {@workdir={'workdir', 0x3d, './file0'}}], [{@uid_gt={'uid>', r2}}, {@appraise='appraise'}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, 'incremental-fs\x00'}}, {@euid_lt={'euid<', r3}}]}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:36 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x5) 20:47:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bf8001b"], 0x30}}, 0x0) 20:47:36 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0)) 20:47:36 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 655.139123][T22301] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:37 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x14000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000bfc001b"], 0x30}}, 0x0) 20:47:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 655.179030][T22301] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:37 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x6, 0x7, 0x8, 0x4, 0xf, "bda8fd26f000bd492ecadfd42ca182bd8a055c"}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x40, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000140)={@private=0xa010101, @remote, @multicast1}, 0xc) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) 20:47:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x6) 20:47:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000020008001b"], 0x30}}, 0x0) 20:47:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0x3, [@ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0xfffffffb, [{0x8, 0x5, 0x5}]}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @union={0xb, 0x5, 0x0, 0x5, 0x0, 0xc3, [{0xe, 0x4}, {0x5, 0x0, 0x7}, {0x7, 0x4, 0x9}, {0x8, 0x0, 0xfbd8}, {0x4, 0x5, 0x1ff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x5d6}}, @datasec={0xb, 0x3, 0x0, 0xf, 0x1, [{0x3, 0x6, 0xee}, {0x5, 0x3ff, 0x4}, {0x4, 0xfffff9a8, 0x25d}], 'Z'}, @typedef={0xe, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/60, 0x10f, 0x3c}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) mount$fuse(0x0, 0x0, &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f6465463a591956b17e0030303030303041f1439222730d5690353255710000000000000000000000002c9b7b58e6eef1748ee7992cd785f4b8d868bfd7f2c8ef4c7015cb630b94725fbb35f3915ac1a26b868d4ab52ab33cacf297f5c1982f3ae33dcab2360936a0e6202b6354f7aff3dee98c564647e8fcf113b4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1, @ANYBLOB="2c00e6c0d9a3efb466fc5506d1801f2db30df003eab538ba324dc01e0c53c3bfe13d3eb5678a44197736f95e3de91ce729fccedb27a4ea"]) lsetxattr$system_posix_acl(&(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x5}, [{0x2, 0x7, 0xee01}], {0x4, 0x4}, [{0x8, 0x9, r1}, {0x8, 0x1, 0xee01}], {0x10, 0x1}, {0x20, 0x4}}, 0x3c, 0x2) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000540)={0x15, 0x5a, &(0x7f00000004c0)="92c28ae61e2c58127a71a38cf651e4f134dd17b2a9106e4bb799549b3f24d48a34b9c0dbb8f6c9e7592c23a420101b0005cb8e6dba64cd2eba5ebd98f0387cfdfded2bd3585a7ef7af84b473a72a0732bddb79c6d40c58f2a126"}) write$FUSE_STATFS(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimensat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {r2, r3/1000+10000}}, 0x100) 20:47:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x7) 20:47:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x800000000, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:37 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000030008001b"], 0x30}}, 0x0) [ 655.276872][T22332] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 655.342339][T22332] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:37 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x20000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x1]}, 0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000380)={0x800, {{0x2, 0x4e20, @empty}}, 0x1, 0x1, [{{0x2, 0x4e24, @local}}]}, 0x110) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8) 20:47:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000040008001b"], 0x30}}, 0x0) 20:47:37 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:37 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x10000, 0x109100) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef828e960661e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r2, @ANYRESHEX, @ANYRES32=r3, @ANYBLOB, @ANYRES32], 0x24}}, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f00000003c0)=ANY=[], 0x9) write$P9_RREADDIR(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000010000000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r4, r4, &(0x7f0000000240), 0x7fff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r6, @ANYRESHEX, @ANYRES32=r7, @ANYBLOB, @ANYRES32=r4], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1a0850}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r2, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x65}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "43b51541a5ac1bbe5799252e76"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0xc19d2f0afa73d3af) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x10000) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x9) 20:47:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000050008001b"], 0x30}}, 0x0) 20:47:37 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000060008001b"], 0x30}}, 0x0) 20:47:37 executing program 1: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:37 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xa) 20:47:37 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x20100000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 655.475308][T22378] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 655.497114][T22378] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x52008, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000000000080f50500007f000020050000000300000000000000000000800101a94a3d7697556205e9000007000000070000000100000000000000070000805a02000005000000080000002000000000000000000000c00500000040000000090000000104000000000000000000c005000000010000008100"/137]) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xb) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000070008001b"], 0x30}}, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x22000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:38 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_dellink={0x128, 0x11, 0x100, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x10, 0x50041}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_0\x00'}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_CARRIER={0x5, 0x21, 0x2}, @IFLA_PROMISCUITY={0x8}, @IFLA_PROP_LIST={0xa4, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'veth1_to_hsr\x00'}, {0x14, 0x35, 'netdevsim0\x00'}]}, @IFLA_LINK={0x8}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_NET_NS_PID={0x8}, @IFLA_MASTER={0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x4880) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000080008001b"], 0x30}}, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xc) 20:47:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 656.272742][T22414] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000090008001b"], 0x30}}, 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xd) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000a0008001b"], 0x30}}, 0x0) 20:47:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x810, 0x0) [ 656.336480][T22414] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x24000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000b0008001b"], 0x30}}, 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xe) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000c0008001b"], 0x30}}, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x10) 20:47:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004050) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:38 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) mount$fuse(0x0, 0x0, &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB="2c726f6f746d6f6465463a5991fa58000030303030303041f1439222730d5690353255710000000000000000000000002c9b7b58e6eef1748ee7992cd785f4b8d868bfd7f2c8ef4c7015cb630b94725fbb35f3915ac1a26b868d4ab52ab33cacf297f5c1982f3ae33dcab2360936a0e6202b6354f7aff3dee98c564647e8fcf113b4", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r2, @ANYBLOB=',\x00']) setxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000000280)='\x00', 0x1, 0x3) fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, r2, 0x800) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r3, 0x0, 0x0) write(r3, &(0x7f0000002340)="1dde14a07ff4b5790ea1acccabafd5d64da08812da5c86d16a0a31f1ecf0715862e66969952f3f832fc260c6c9419880c816ce0e71080b99ccd68139b77b24e9efbbaf6dddb3852a138423ce3e4b6c", 0x4f) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000d0008001b"], 0x30}}, 0x0) [ 656.458507][T22457] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 656.493828][T22463] incfs: Error accessing: ./file0. 20:47:38 executing program 5: membarrier(0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x11) 20:47:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x2c000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.self_freezing\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00', 0x1400) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000000e0008001b"], 0x30}}, 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x12) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000100008001b"], 0x30}}, 0x0) [ 656.518427][T22471] incfs: Error accessing: ./file0. [ 656.533114][T22457] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x20200, 0x2) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x100086, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000110008001b"], 0x30}}, 0x0) 20:47:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @remote}, &(0x7f0000000080)=0xc) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000120008001b"], 0x30}}, 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x300) [ 656.635551][T22498] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x30000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2200880, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x4) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000000)) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000250008001b"], 0x30}}, 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x3e7) [ 656.676091][T22498] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x20) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000040)={0x7, 0x7, 0x1}, &(0x7f0000000080)=0x28) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x8000, 0x0) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='9p\x00', 0x8200, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB="2c706f7369787163ec47616669643d3078303030303030303030303030303366662c037b4abd656d61702c706f73697861636c2c646566636f6e746578743d73797374656d5f752c61707072616973652c6f626a5f757365723d72616d6673002c736d61636b66736465663d2c666f776e65723d", @ANYRESDEC=0xee01, @ANYBLOB=',smackfsroot=ramfs\x00,\x00']) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000480008001b"], 0x30}}, 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x480) 20:47:38 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) renameat2(r0, &(0x7f0000000080)='./file0/file0\x00', r1, &(0x7f00000000c0)='./file0/file0\x00', 0x2) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 656.775424][T22532] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3a04a2c6, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000004c0008001b"], 0x30}}, 0x0) 20:47:38 executing program 4: io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000000), 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x4f5) 20:47:38 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5c, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x2a, 0x40, 0x37, [{{0x9, 0x4, 0x0, 0x81, 0x3, 0x2, 0x6, 0x0, 0x81, {{0x6, 0x24, 0x6, 0x0, 0x0, '<'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x4, 0x6}, [@country_functional={0xe, 0x24, 0x7, 0x80, 0xc9c, [0x9, 0x9, 0x7, 0x81]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xb, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x8, 0x8, 0xc0}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x6, 0xff, 0x0, 0x40, 0x4e}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1435}}, {0x84, &(0x7f0000000400)=@string={0x84, 0x3, "a62e19b77887307fb5768d1c58e67f5ee91f3a9299a4a5eab88ccc24a0fb742f48ea12adfe470dfade2f70a87348ae0df599fe33ead099f18fc521e2d7d0e8a266e1f616b180496fe3afd26c324b64c8a075e9f72b4c8105a82e024f87350ae37f9866f065471afa82583e332b1702d48f750668b3df44e191c340b44b4a08de6bce"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0xf8, &(0x7f0000000540)=@string={0xf8, 0x3, "af5ecfd656558c6f7f9a51a719b027b09d738f825fd24a9a8b35d9635ced9025b1a16c84004b68c1feef1bfc7ec6852d028d446fbdc2f861f2ff4bfb9b2c93e6d2fe0952b472f89b088f70a5ce2103cac3857187774e2203700f30b86dd7542eac27cdca3c1af5d172578ef56d4617a78d6c6afd327d3f146040a89cc54547d6fac5f1da954ed163d76dbf0bebb92514f02721a43320784e58482b676addfbad545be8c23e3ba3fc12f473ecce4e91dcf8902546bfb80eb04fb6bba09097778274193bbb9939368233eed58fc3a78d8d1764d33116ee0adc91016805864e949c2c386acccb3de2afcabe9ab54996088d3be6cda18202"}}]}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='freezer.self_freezing\x00', 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 656.830692][T22532] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000600008001b"], 0x30}}, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x3f000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:38 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) syz_usb_connect$cdc_ecm(0x9f1979e3cb98d19b, 0x61, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0x1, 0x8, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x3f, {{0x8, 0x24, 0x6, 0x0, 0x0, "54ae2d"}, {0x5, 0x24, 0x0, 0x80}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x6, 0x5, 0xf8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfe, 0x1, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x1f, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x903dbc2e67d89aa4, 0x3f, 0x0, 0x81}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x76, 0x5, 0x0, 0x0, 0x4a}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "ef470057b897ee483844fa2eded29bf6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x0, 0x1f, 0x401}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x820}}, {0x30, &(0x7f0000000200)=@string={0x30, 0x3, "fae3e23ee5e4b9f21f467c22a8de928da9fd69e686af353d28f1edd54ec7981d5a396a8b61d969f21b57ebbbe96e"}}]}) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x500) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000680008001b"], 0x30}}, 0x0) 20:47:38 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:38 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x600) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000006c0008001b"], 0x30}}, 0x0) 20:47:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000740008001b"], 0x30}}, 0x0) 20:47:38 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x40000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 656.966480][T22581] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 656.986875][T22581] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 656.999573][T22584] incfs: Backing dir is not set, filesystem can't be mounted. [ 657.044332][T22595] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 657.059418][T22595] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1002011, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)={0xa6, 0x29, 0x1, {0x8001, [{{0x8, 0x4, 0x8}, 0x7, 0x7, 0x7, './file0'}, {{0x8, 0x4, 0x2}, 0x100, 0x3f, 0x7, './file0'}, {{0x10, 0x2}, 0x5, 0x1, 0x7, './file0'}, {{0x8, 0x3, 0x6}, 0x43, 0x1, 0x7, './file0'}, {{0x2, 0x0, 0x6}, 0x297bdf47, 0x4, 0x7, './file0'}]}}, 0xa6) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="0000000000007a0008001b"], 0x30}}, 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x700) 20:47:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x200020, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:39 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4c899d51, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="00fb5f040189490c3e381fd806a7ec9308c831d2b3c6fa7b421cf77adb3f48e8c2010e673d33b6cdd60527070089bf3cad0398c9c56e81e72263f8f380d3e8c546a96ee69aa56df81dce9d623e4744c2008b1f4f519501ef77be829e5dcf79"], 0x5f, 0x2) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000720108001b"], 0x30}}, 0x0) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x900) [ 657.416555][T22603] incfs: Backing dir is not set, filesystem can't be mounted. [ 657.424327][T22602] __nla_validate_parse: 48 callbacks suppressed [ 657.424333][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:39 executing program 4: mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1000000, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=""/108, &(0x7f0000000140)=0x6c) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000000)=0x84) r2 = signalfd(r0, &(0x7f0000000180)={[0x6]}, 0x8) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r3, r2, 0x0, 0x2a, &(0x7f0000000380)='fdinfo/4\x00\xf8\x1aDC\xd1B\r\x95\xbf+\"\xed\a\xab+:\x87\xce\x04P\xc3\xe6\xb4\xd0\x01\xc4F\xd5\xb90\xb1$\xea', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r4}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x4) r6 = open_tree(r5, &(0x7f0000000240)='./file1\x00', 0x358a26a509e091f0) mmap$usbmon(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x0, 0x4010, r6, 0x9) epoll_create1(0x80000) 20:47:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x350, 0x350, 0x438, 0x230, 0x230, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, &(0x7f0000000080), {[{{@ipv6={@empty, @loopback, [0xff, 0x0, 0xff000000, 0xffffff00], [0x0, 0xffffffff], 'ip6tnl0\x00', 'vlan1\x00', {0xff}, {}, 0x89, 0x8, 0x1, 0xe}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0xc, 0x1, 0x9, 0x7f, 0x7, @private1, @mcast1, @ipv4={[], [], @remote}, [0xffffff00, 0xff000000, 0x0, 0xff000000], [0xffffffff, 0xffffffff, 0xff, 0xffffff00], [0xffffffff, 0x0, 0xff, 0xff], 0x1200, 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x48}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d2, 0x4d2], 0x5, 0x1, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@remote, 0x21, 0x2a, 0x3}}}, {{@ipv6={@remote, @remote, [0x0, 0xff000000, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan1\x00', 'ip6_vti0\x00', {}, {}, 0xc, 0x3c, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x2, "2e98497daf330400d7b0308ef9719469ab76135754089245334282152d73"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x37}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xa00) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000308001b"], 0x30}}, 0x0) 20:47:39 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x519d894c, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 657.507945][T22623] incfs: Backing dir is not set, filesystem can't be mounted. [ 657.523085][T22627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 657.526963][T22631] incfs: Error accessing: ./file0. 20:47:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x40000000000002, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='incremental-fs\x00', 0x2c00, 0x0) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000508001b"], 0x30}}, 0x0) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xb00) 20:47:39 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x5c000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 657.571410][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pvfs2\x00', 0x10020, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="d53375c137562964d93bd65eecf9de86f83038cbeeaa7409b7f96e170e52f0b599e187c17cc5a019280ad31638f6987977852f6cce6854c0f743599bda6f96f94cc085651a73fabe22e5fb8c9d238b9c5a4b", @ANYBLOB="3da6f28d15b261c0cfa3f1124944e04d3dc4f2775bbc16800c05319126055694ec404841b1476ffce97218d682896cce3a4a1cc53b0901a256a640874a18a10fe07c135fd0264947c821ab1b6813cb0f5333b079d20ad4d0773b0a603bfdc93ed1f76a1a2595dbc4ae35c5db9548e625e9e12f01669fda8b2a4bd57ba5e0636826d11e3b1e7a813f3ce954ed5549671d8cafdd5e868d2b9110c70cd9b3a8126c96fd3783ebc2c9a9c88b5cc4717ec4e071000000d9740c071b", @ANYRES16, @ANYRESDEC, @ANYBLOB="56cde3cc3e306af83883cb13af4d09072c4a338e547821ea80e43cd05a55d4d164c99460138bf99ddfa4eab0a6483a1231f6ef77577946afb7adb08d8595850922c764b905b09648d1f2ba9ee30315fa7a4f323738e21e15a98a0c4133a7b3ace50600e3783bb26610d238a8c873e6", @ANYRESOCT=r1, @ANYRES32, @ANYRES32, @ANYRES16], 0x2e) write$P9_RREADDIR(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="bfff0000290100400000000201000000070000000000000005000000000000000207002e2f66696c65300803000000060000000000000000000000000000000705002e2f6275730001000000070000000000000081000000000000000105002e2f6275730804000000cc5700000000000000000000010000000007002e2f66696c653008030000000600000044aef8625859701e000000003007002e2f66696c6530000200000003000000000000000101000000000000ae05002e2f6275"], 0xbf) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000513d84d7f6ecacd573bc7e79a74302973d20826027c1c0502a94bdd0164152524dfad95edeafa0923c6650076cb08f863065d6d318a5349e8c162b9156a84373cbe9f973bc07fa8b970988138fcf9e1824c6e8b1f4f455490cf572d3ebc99506f642484b9e8f598655db52cbcf04b6c069e595745baea2150cea7174c6fc4498d9", @ANYRES16=r4, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB, @ANYRES32=r1], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, r4, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x26}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000080)='./file0/file0\x00', 0x40, 0x1a) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xc00) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000608001b"], 0x30}}, 0x0) [ 657.644024][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 657.700267][T22666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 657.726859][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xd00) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000708001b"], 0x30}}, 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xe00) 20:47:39 executing program 4: sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000003a00)=ANY=[@ANYBLOB="2c368000", @ANYRES16=0x0, @ANYBLOB="0008c2d8c64efdf9958cbf857532bbd94d1844234df2b2e03c4000fbdbdf4083007bbc000008004a47c5", @ANYRES32=0x0, @ANYBLOB="14000580100000800a0001000802110000000000b00305807403008024010380100101800c0001800600040005000000140001800400090004000800060004000900000040000180050006001400000004000a00080002000300000004000b0004000100050005000100000004000a0004000a000500030006000000050005000600000028000180050003000b0000000800020003000000050003000800000004000100050006001d0000001c00018004000100080002000100000004000900060004000900000010000180040009000400090004000a0020000180040008000400010004000800050007000900000005000300030000003800018004000100050005000500000005000700e9000000060004000908000004000a00050006001a00000004000800050005000d000000040002000400020004000200040002000a000100080211000000000040020380900001800c000180080002000000000024000180050005000100000004000b00050003000c0000000400080005000700800000002c000180050006000c00000004000b00060004000200000004000b000400080004000100040001000400010030000180050005000d0000000400010004000a00050006000d000000050003000c00000005000600010000000400080004000200c400018020000180050005000a0000000400010004000b0004000900050003000c00000008000180040009002400018004000b000400080004000b00050003000200000005000500010000000400010014000180080002000100000005000600060000001800018004000a00040001000600040006000000040008002c000180040009000500070001000000050006000200000004000900050007007f000000050006001b0000001c000180050006001e00000004000b0004000b000400010004000b00040002000400020004000200d000018010000180040001000800020004000000240001800800020001000000050003000900000004000b0004000a000800020000000000080001800400090028000180060004000000000008000200000000000800020002000000050005000a00000004000b002000018004000800080002000100000004000100080002000200000004000a001c0001800500060001000000040008000500070001000000040008000c000180050007000600000020000180060004000300000005000700090000000400090006000400ff7f00000400020004000200380000800a000100ffffffffffff00000a00010008021100000000001c000280050019010f000000050019010900000008009f0006000000f80505808000008070000380040002006800018018000180050003000900000004000b0005000500070000000c000180050005000d0000001c00018005000700040000000400010004000a000500030006000000240001800800020000000000050007000600000004000800050006001a00000004000b000a0001000802110000010000100000800a000100080211000000000014000080040002800a000100080211000001000094010080400103807c0001801800018004000b000500060004000000050006000a0000000c000180050003000e000000140001800400090004000a000600040007000000340001800400090004000800050005000f00000006000400ff0000000400010008000200030000000400080004000b00040001000c0001800500060005000000040002000400020004000200040002009400018028000180080002000200000005000600060000000500050004000000040001000500060008000000400001800500050004000000040001000400010004000900050006001f000000040001000600040001010000060004000900000004000b0008000200000000001400018004000a000400080005000700010000000800018004000a000c0001800500060010000000040002000400020004000200100001800c00018004000b00040001001400028008009f000100000008002700020000000a000100ffffffffffff00000a000100ffffffffffff00002400028008002700020000000800270001000000080026005e1e00000800270003000000400100803c010380cc000180140001800400080004000900050005000a000000040001801c0001800400010004000800050007000700000004000a00040009000800018004000b002c000180050005000f00000004000100050007004a000000050007004e00000008000200010000000400010010000180060004000200000004000900500001800500070007000000050005000e00000006000400080000000800020002000000050006000f00000005000600150000000500070013000000060004008100000004000b0008000200020000006c000180040001801800018004000a0004000a000400080004000100040009002c00018004000b00050005000f0000000500070004000000050005000e00000004000100050005000a0000002000018005000300010000000400090004000100040009000400080004000a00ac000080600003800400020048000180440001800500060007000000050006000f000000060004000500000004000a00040009000600040000000000060004002000000005000500010000000500050008000000040002000400020004000200040002001400028005001901040000000800270000000000340002800800270003000000050019010e000000050019010e0000000800a0000700000008002700020000000800a00006000000d00100800c0002800800270002000000c0010380040002000c000180080001800400080004000200300101804400018006000400080000000500060007000000060004000100000004000b0004000a00050006001700000004000a0005000600010000000500030001000000040008003800018006000400fcff0000050007000700000004000b000400080004000b000800020002000000050007000100000004000900040001002000018004000a000500050007000000050005000c00000004000900040009001800018004000b00050005000f00000005000600190000002c000180060004003f000000040001000500030002000000050005000f000000050003000600000004000a001000018004000b0005000500000000000400018018000180060004000600000004000a00050003000d0000002000018004000900060004000200000005000600050000000800020004000000780001800800018004000a0008000180040009001000018004000a0006000400000100001800018004000a00050007000400000005000300050000003c0001800400080004000800040001000500070033000000050003000c00000004000a00050005000a000000050006001200000004000b000400080074090580500000800a00010008021100000000000a000100ffffffffffff0000340002800800a100050000000800270001000000050018012f00000008009f000000000008009f0001000000050019010f00000004000080d8070080dc030380040002001c01018024000180050007008100000004000b0004000b00050006000f000000050003000d0000001400018004000800050006000e0000000400090030000180050005000900000004000b00050003000a000000040001000500060004000000060004008100000004000a000c00018005000600160000000c000180050005000400000038000180060004000200000005000700050000000400090004000b0005000300020000000400010004000a000500050001000000040008003c000180050006000f0000000500060006000000040008000600040000000000080002000100000006000400489000000400090004000b00040008002400018004000800050005000000000008000200060000000400090004000b00040001003c0101802000018004000b0005000500090000000400090004000800050003000700000044000180050006001800000004000a000600040009000000050005000d00000004000a00080002000300000004000a00050005000200000004000100050006000a0000002000018005000600050000000400090004000100080002000200000004000a002c000180040001000800020004000000040008000400080008000200010000000400090004000a0004000a00080001800400010024000180050005000f0000000500070001000000050003000e00000005000500050000002000018004000b000800020003000000060004007f000000050003000a0000002000018004000b000800020004000000060004000400000006000400001000001c000180060004000400000006000400030000000500060015000000bc0001802400018005000700fb000000050005000e0000000800020004000000050006001a000000280001800500070009000000050003000e000000060004000100000004000900080002000300000034000180060004007f000000050006001f000000050006001700000008000200010000000800020004000000050007008100000010000180040001000500060007000000280001800400090004000b00050007008100000004000b0004000b00040008000400080004000b000400020080000180140001800500070001000000050007000000000028000180050006001300000006000400b188000004000a00050003000d00000005000700010000004000018004000900050003000e000000050003000600000005000700400000000800020002000000050007008100000004000a000400080006000400000000000400020004000200340001802800018005000300050000000400010004000900040009000500050001000000050006001d00000008000180040009001c00028005001801110000000800a100de7700000800a1007f000000240002800800270000000000080022012b01000008002600b8150000080026006c0900002c0103809c0001801400018004000a000500030004000000040009001800018004000b00040008000500060019000000040001002400018004000b0005000600060000000500050002000000050006001c0000000400090014000180080002000400000005000600150000000c000180050006001f0000001000018004000a00050005000e0000001800018004000a00050005000200000005000300040000008c0001801400018004000b0005000500070000000400090034000180060004000100000005000300090000000500070007000000050006000d0000000500070001000000050003000b00000020000180080002000400000004000a000800020004000000050005000e000000200001800500050006000000050006001a000000040008000500070040000000080203806000018018000180040009000400010005000700ff00000004000a0028000180050005000500000004000a0004000b0004000b00040008000400010005000500010000001c00018004000b0004000a000400090004000800050005000300000028000180240001800400090005000500030000000400090004000b0005000700010000000400090004000200a80001802400018004000900040001000500060002000000050006000f0000000600040001000000240001800600040007000000050005000d000000050005000f00000006000400010000001800018006000400070000000400080006000400000000004400018004000b00060004009400000005000600080000000800020002000000040008000400090006000400e3080000040001000500050000000000050005000500000004000200cc0001801c00018004000100050007004000000006000400ff010000040001003400018005000300000000000500030003000000050006008100000004000a00060004005b000000050005000d000000040009001800018004000b00040009000400010006000400010400001c0001800400090004000a000400090004000100050005000b0000001c000180050007004b000000050003000e0000000800020001000000280001800500060019000000060004000020000004000a000500060007000000050006000d00000044000280050019010f00000008002201770200000800a1009ed200000800a0001f000000080027000300000008002600b815000008009f0004000000080027000300000034000280080026008009000008009f00030000000800a00009000000050019010a00000008002700020000000800a0003f0000000a00010008021100000000004c0000802c000280050019010d00000008009f00000000000800a100030000000800a00000000000050018012e0000001c0002800800a0000300000005001801300000000500180120000000880000800a0001000802110000010000440002800800a10000000000050019010a000000080022011b03000008002600da1d00000800a000fc7d00000800a0000100000005001801260000000800a100ffffff7f34000280080022012f030000080027000100000008009f000100000008009f0002000000050018013c0000000800270002000000700000803c0002800500180110000000050019010c0000000800270000000000050019010b00000005001801290000000800a1000700000005001801050000000a00010008021100000100000a00010008021100000100000a00010008021100000100000a000100ffffffffffff000008020580740000802c00028008002201a70300000800a10010000000080027000200000005001901050000000800a000050000002c0002800800a1000400000008009f00010000000800270003000000080026003c140000080026006c0900000c00028008009f00030000000c0002800800220146010000100000800a000100ffffffffffff0000800100800a000100080211000001000070010380480101803c0001800400010006000400ff00000006000400030000000500030008000000040001000600040007000000050006000d00000004000a0004000a001c0001800600040009000000080002000300000004000b0004000a0008000180040001000c0001800500030005000000300001800500070002000000080002000400000004000a00050003000c0000000800020000000000050006001f0000001000018004000a00050006000c0000002c000180080002000300000006000400030000000500050001000000080002000400000008000200000000003c000180040009000400080005000700cd00000004000100040008000600040000040000080002000100000004000a00050006001c00000004000b00180001800500070006000000050003000b000000040008001800018004000b000500030005000000050007000500000004000200200001801c000180040008000400090006000400001000000500070008000000880005808400008034000280050018011900000008009f000000000008002201f801000008009f00030000000800a000010000000800a000090000000a000100ffffffffffff0000040002801c000280050018010d0000000800a0000800000008002700030000000c000280050019010800000008000380040002000a00010008021100000100002c0b0580280400800a000100ffffffffffff000014010380c40001801c000180040008000600040004000000080002000300000004000a000c00018004000800040009001400018005000700060000000500060015000000100001800800020003000000040009000c00018005000700810000000c00018004000b00040008001400018008000200020000000500070020000000040001801800018004000a00050003000400000008000200040000002c000180050005000000000004000b0005000700f800000004000800050006001e00000005000700000000004c000180480001800600040006000000050006000500000004000a0006000400c900000008000200020000000500030009000000060004000300000004000a0004000a0006000400800000000a0001000802110000010000140002800500190108000000050018012e00000090000380800001803c00018004000100060004000500000004000a00050006001d0000000500060001000000050003000c0000000400010005000700fd00000004000a004000018004000a00040008000400080006000400090000000400090008000200000000000500030007000000060004000500000004000b000500070040000000040002000400020004000200480203800400020004000200480101800c0001800500070001000000200001800500030004000000080002000100000004000100050006001a0000002c000180050006000e00000004000a00050006001100000004000900050003000d000000050006000500000034000180050006000b000000040009000500050000000000040001000500060009000000060004000300000006000400010400001c0001800500070002000000050007004000000005000700040000003c000180050003000100000004000100050006001b000000050005000500000005000700f8000000050007000500000004000a00050003000300000014000180080002000400000006000400040000000c00018008000200030000000c0001800400080004000800340001800800020003000000050006000800000004000b0004000b00040009000500050004000000040001000500070040000000040002000400020004000200e40001803000018005000500060000000500070003000000080002000000000004000100050003000f000000080002000100000024000180050007000700000005000600100000000400010006000400feff00000400010008000180040009003400018004000900040008000800020004000000080002000000000004000100050003000400000004000b0005000500070000000c00018005000500010000003800018005000600170000000400010006000400200000000400090005000600170000000400010004000100040001000400080004000a000c0001800800020003000000040002000a00010008021100000100009002008078020380500001802800018005000700070000000400080004000a0004000900080002000400000005000700e100000024000180050006001c00000004000b000400080004000b00080002000000000004000b00100001800c00018004000a000400010004000200d00001801c00018004000100050006001c00000004000b00050007000900000020000180050005000800000004000900050006000500000004000900040001002400018006000400d4d40000050007000600000005000700300000000500060011000000040001801400018006000400b4210000050007007d0000001400018005000500070000000400090004000b00040001801400018004000a000400080008000200000000000800018004000a002000018004000a0004000a000500030005000000050007000900000004000a008c00018010000180040008000600040005000000380001800500050001000000050007001f0000000500050001000000050007001f000000050005000d000000050006000800000004000800040001803c000180050005000f00000008000200030000000400080004000a000500030002000000040001000400010008000200030000000500070007000000b0000180080001800400080028000180050006000800000004000900060004000400000004000b000400080005000700050000000c00018006000400050000001000018008000200020000000400080024000180040008000800020002000000080002000200000004000100050006000000000010000180050003000d000000040009000c0001800500050008000000080001800400080018000180040008000500030006000000050006000f00000004000200140002800800a000fbffffff0800a10008000000100100800a0001000802110000010000f8000380dc00018018000180050005000f000000050005000000000004000800380001800500030003000000050006001e00000004000a00050003000c000000040009000500070008000000050007000300000004000a002c00018004000a0004000b0004000100040008000500060019000000050007000600000004000a0004000b004000018006000400ff7f000004000a00050006001a000000050003000200000005000600040000000800020001000000080002000300000004000b00040008001c00018006000400ff03000004000a0004000100050007000800000014000180100001800400010004000a0004000100040002000800038004000200500000804c0002800800a100080000000800a000070000000800270002000000050019010e000000050018012800000005001801050000000800a100070000000800a100000000000800a00000000000100300800a000100080211000000000034020380040002005000018034000180050003000a00000004000a000500030004000000040001000400010004000800050006001c0000000400090004000a0018000180060004000300000004000900050003000f00000004000200640001801800018008000200000000000800020000000000040008003400018006000400040000000800020004000000080002000400000005000700ff0000000400090004000a0004000a00040009001400018004000a00050007000600000004000b0024000180200001800400010004000b00040008000800020001000000050003000500000004000200040002004801018034000180040008000400080005000700000000000800020003000000040009000500070007000000080002000300000004000b0038000180050003000c00000004000100080002000100000004000100050005000b00000004000b0004000a0004000b0005000300010000002400018004000a00080002000200000004000a0004000b0004000a00050007000200000040000180050006000c0000000500060013000000050006000c00000008000200010000000600040007000000040001000400090004000b00050003000600000014000180050003000d000000060004000500000010000180050005000e000000040001002c00018004000a000500070006000000050005000a00000004000900050005000c000000050006001700000024000180050006001600000004000800050006001700000004000800050006001c00000024000280050018011200000008009f000500000008002201f300000008002201da0200000c00028005001901070000006800038004000200600001800c00018006000400ff010000240001800500070007000000060004000000000004000b0004000b0006000400090000002c0001800500070002000000050003000100000004000a00040001000500030005000000080002000200000034000280050018013c0000000500180105000000080027000000000008009f00020000000500180133000000050018012800000054040580100000800a0001000802110000000000200000801c000280050019010500000008002201630100000800a00005000000a4020080240002800800270001000000050019010b000000080026002a1d000005001901060000007c010380e00001802c000180080002000000000004000a00050007000900000005000700050000000400090005000700040000002c0001800600040001800000050007000100000004000a00050007000000000008000200030000000400010020000180080002000100000004000800050006001a00000005000500020000001400018004000a0004000100050005000d00000024000180050005000900000004000b00050003000600000004000b000500070081000000140001800500050001000000080002000200000018000180040001000500060005000000050006000700000004000200740001800c000180050003000800000010000180050005000a00000004000a00040001803c0001800600040001000000040001000400010004000a00040008000500070007000000050007007e000000060004003d00000004000800040008001400018005000500090000000800020007000000200001801c00018004000b000500050006000000050005000800000004000a0008000380040002001c000280080027000200000008002201b202000008002600f4150000540002800500180137000000080026008c14000008009f000000000008002201350100000800a000000001000800a100faffffff08009f000000000008002201ee00000008009f000700000008002700030000000a00010008021100000000002c000280080022018c000000080026006c0900000800a000010100000800a000ff03000008009f00000000000a0001000802110000010000440002800800270000000000080027000300000008002700020000000800220165000000050018013b0000000800a0002000000008002600b044b6fc08009f00060000007c0100800a000100080211000000000044000280080026006c090000050019010d00000008002700020000000500190105000000080026006c0900000800a100faffffff050018013200000008009f00050000009c000380940001801c0001800400010004000b000500050009000000050007008100000008000180040008002400018004000a00080002000100000004000100050005000b000000050003000f0000001400018005000700fc00000005000300030000002c000180040008000800020007000000080002000100000004000800060004000400000004000a0004000b000800018004000a00040002008c0003801400018010000180060004000101000004000a00740001802c0001800800020004000000040001000500050007000000040009000500060017000000050006001c000000140001800400010006000400040000000400010028000180050006001d000000050006001d000000080002000100000004000a0004000100040008000800018004000800d010058088030080d8000380c800018030000180050005000b00000005000700f70000000600040009000000040008000500070009000000040008000400090008000180040009000c0001800500070005000000440001800500070001000000050005000500000004000a0004000100050006000c0000000500050003000000040001000600040080000000050005000400000004000b001c0001800500050006000000050005000300000005000600070000002000018004000900050006001500000005000500020000000400080004000b000400020004000200040002000a000100ffffffffffff0000040003803400028008002201a60100000800a000ffffff7f0800a000050000000800a000040000000800a00001000000050019010a00000028020380b000018028000180060004000010000005000700020000000500070004000000050007005a00000004000a0028000180050005000400000008000200000000000500050005000000050006001600000004000a003000018004000100050003000e00000008000200000000000400010004000a0005000500080000000400080004000800100001800500060018000000040009001c000180050005000200000004000b00040008000800020000000000300001801000018004000b0005000600020000001c00018006000400dcd2000008000200010000000500030008000000180001801400018004000b000400090004000a000400080004000200040002000400020004000200040002001801018024000180040008000600040020f10000050007000000000004000800050003000b0000002c00018004000b00050003000700000005000600130000000500060019000000050003000a00000004000b001c000180040001000400080005000600160000000500070005000000240001800400090006000400090000000400010004000800050007000200000004000b0048000180040008000800020003000000050006001f00000004000900050006000f00000004000b0005000700810000000500030006000000050006000600000005000600130000000400018018000180050005000c00000004000a00050003000200000020000180050005000600000004000b00060004000800000008000200040000000a000100ffffffffffff00003400028008009f00010000000800a10007000000050018010b000000080026006c09000008009f000200000008009f0004000000e8020080440003800400020004000200380001803400018004000b00050007000800000005000500060000000500030005000000080002000400000004000900050005000d0000001c000280080026006c090000080026006c09000005001901090000002c0103800400020074000180380001800400090004000800050003000e00000004000a00050005000e00000004000100050005000500000004000b0005000300050000000c00018004000b0004000800140001800500070006000000050005000a0000000800018004000b001000018004000a00040008000400080004000200ac0001803c00018004000900050007000300000008000200010000000500070081000000040009000400090006000400010000000400080005000600150000001400018004000a0005000700070000000400010038000180040008000600040009000000040009000400010008000200020000000500030002000000040001000600040000040000040009000c00018005000700010000001400018004000a0004000900050003000e0000000a00010008021100000000004c010380040002004401018030000180050003005300000005000700fe0000000400010004000100050005000100000008000200040000000400010034000180050006001000000004000a0006000400018000000500070008000000050006000200000008000200020000000400010040000180080002000400000005000300020000000800020002000000080002000400000004000b0004000a0005000300060000000800020000000000040009000c000180050006000800000014000180040008000400010005000300050000000800018004000900300001800400090005000500090000000400010005000500070000000600040000500000050006000400000004000a001000018004000b0006000400080000002c0001800500050008000000050005000c000000050007000500000004000b0004000800080002000300000008000180040001008406008038020380040002002c00018028000180050007008000000005000500040000000500050008000000050005000c000000040008000c0001800800018004000800040002002c00018024000180040008000400080004000b000400090004000900050005000b000000040009000400018004000200dc0001802400018006000400090000000400080004000b000500070006000000050005000700000044000180050006001d000000050003000c000000080002000300000004000900050003000400000004000b000600040000000000050007000600000006000400070000001c0001800400080004000a00040001000800020000000000040001003400018005000700010000000500030008000000050006000e00000005000600160000000600040008000000050005000a000000200001800500030009000000050006000600000004000b000500070030000000300001802c00018004000900050005000f00000005000300020000000400090005000700ff0000000500070004000000500001802000018006000400080000000500070001000000080002000400000004000b00200001800600040006000000050006001c0000000500050002000000040009000c0001800500050008000000680001804000018005000700fb00000004000800050003000a000000050005000d00000006000400ff070000050006000b000000050003000f00000004000b0004000900240001800800020004000000060004000002000004000b00050007000000000004000a0008010380ac0001802c0001800500030009000000050003000c0000000600040001000000050005000f000000040008000400010020000180040001000800020004000000060004000200000004000100040009001000018004000b00050003000f0000003000018004000100050006000f000000040001000400090005000600040000000400090004000900050005000e000000180001800500050004000000050006001f00000004000100040001800400020004000200480001802000018008000200030000000500030007000000080002000200000004000a0024000180050003000100000005000700050000000500030002000000050005000d00000004000200040002001c000280080027000000000008002201120000000800a100310000004400028008002600c1160000050018012100000008002201260000000800a000070000000800a1000104000008009f000500000008002700030000000800a000010000002801038004000200bc0001801000018004000b00050006000c00000038000180040008000500070006000000050007003b0000000500050001000000050006000400000004000a000400010005000700a700000008000180040009003400018004000b000400090004000100050005000b000000040001000800020001000000050006001b000000060004001f0000001c00018006000400400000000800020001000000050006001800000018000180050003000c00000004000b000400010004000800200001801c0001800500030006000000060004000200000004000a0004000b00400001802800018004000b00050003000b00000005000500070000000400010008000200030000000400090014000180050006000000000005000600130000000400020074010380780001800800018004000a002400018004000900050005000f00000004000b0006000400040000000400010004000a0018000180050003000400000004000a00050003000d00000030000180050006001a000000050005000500000004000800050005000700000008000200000000000400090004000b00480001800800018004000a00200001800500050001000000050006000800000004000b00050003000a0000001c00018004000a000500030000000000040009000500060004000000b00001801000018004000900040009000400080028000180050003000a000000050007009000000004000900050003000a000000050005000900000034000180050005000a0000000800020001000000050005000300000004000900050005000400000004000b0005000300050000001c00018004000b00040009000500070000000000050006001600000024000180050003007f000000050006001a0000000500070005000000040009000400010034000280080026006c090000050018013a0000000800a100000001000800a00022000000050019010a00000008009f000200000010000380040002000400020004000200d80300801c0002800800a000090000000800a1000400000008002201a20100005400028005001801330000000800270000000000050019010b0000000800a100000200000800a000040000000800a100060000000800a10003000000050019010f0000000800270000000000050018012200000094000380900001802800018004000800050006001e000000060004007006000005000300080000000500030005000000180001800400090004000800080002000000000004000b0034000180050003000700000004000800050006001b00000004000a0004000b00050005000b00000004000800050003000300000018000180050005000600000004000100050003000b000000d0020380340001803000018008000200010000000600040000080000050006001b000000080002000300000004000100050006001b00000024010180300001800800020004000000050005000a00000004000b000800020000000000060004002322000005000600150000000c00018004000b00040009001c0001800500050005000000050003000b00000005000700050000000c0001800500030008000000280001800400090004000800050006000f0000000600040040000000050003000b00000004000a0010000180060004000004000004000b0038000180060004000600000005000600030000000400080005000600040000000500030009000000050005000500000006000400020000002c00018004000b0006000400001000000500070003000000050005000000000004000a00050006001400000020000180050005000f000000050006001f000000050007007f00000004000a000400020040010180080001800400010038000180050005000100000004000100050005000200000006000400030000000600040003000000040001000400090005000500030000003c000180040008000400010004000b00050003000e000000060004000300000004000b00050003000d0000000800020002000000040008000400090038000180060004000600000004000b000800020002000000050003000500000004000a00040008000600040005000000050005000200000018000180050003000f000000050003000d00000004000800440001800600040001000000050003000900000004000a00050005000a00000008000200010000000400080004000a00050005000800000004000a00050005000d0000002c000180080002000000000004000a0004000800050007004a000000050005000b00000006000400010400002c00018028000180050006001c000000050006001b000000050005000100000004000a0004000a000400090004000200"], 0x362c}, 0x1, 0x0, 0x0, 0x804}, 0x40040) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) [ 657.749831][T22666] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:39 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x80040000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 657.813787][T22687] incfs: Error accessing: ./file0. [ 657.826954][T22689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x1010025, 0x0) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0x100000001}}]}}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x810002, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000100), 0x0, &(0x7f0000000500), 0x0, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000100)=0x4) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/94, 0x5e}], 0x1) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x1100) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000908001b"], 0x30}}, 0x0) 20:47:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x64, 0x0, 0x0, 0x1040000, 0x0) mount(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000200)='ext4\x00', 0x2050000, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x1, 0x401}]}, 0xc, 0x1) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000380)=""/162) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x2, 0x0) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000440)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x8cffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x1200) 20:47:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x80000, 0x0) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000a08001b"], 0x30}}, 0x0) 20:47:39 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xa1ffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:39 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0/file0\x00', 0xffffffffffffffff, 0xfffffffffffffef4, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f57000008000000018006080ab6ad000e81"]) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, [], [{0x9, 0x7fff, 0x0, 0x5, 0x7b18, 0x9}, {0x8000, 0x4, 0x5, 0x1, 0x7, 0x53e5}], [[]]}) [ 658.026362][T22704] 9pnet: Could not find request transport: rdma [ 658.039649][T22709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 658.050055][T22704] 9pnet: Could not find request transport: rdma 20:47:39 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3f, 0xffffffffffff0001}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',max_read=0x0000000000000003,max\t\x00ead=0x0000000000000000,fsname=&.,\x00\x00']) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000080)=0x97, r1, &(0x7f00000000c0)=0x8, 0x8000, 0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:39 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x4000) 20:47:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000b08001b"], 0x30}}, 0x0) 20:47:39 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc0ed0000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 658.110019][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:39 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8004) 20:47:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000001880)='./file0/file0\x00', 0x8c100, 0x100) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x4, 0x6, &(0x7f0000001600)=[{&(0x7f0000000100)="a60eda1d61b3ccd9c47086052fa6e86d3263ea8cdeb968dfd4058f6b6bc4e2dac35efa9bef289a3ad96075084b752ead226ddf76c6b361e0d48452afc7", 0x3d, 0x5}, {&(0x7f0000000380)="60dcd4d103539a9fe5b210adefa63f24713ced035659f14345f2d882a2884c6ecb67635a573bd8c438d769b3a1f73302ef9ad2c30f1aa9abc3376bec3a99b9c857fdf3348f8f1bffd5c26a5add274634d75f17ff2511d9ffaa0c0a47e09706a1f3cb2987a3fbadc71606d00a5252c3b080eaf4305f4436f1fb5873d61de2c3b097d97960421086b3dd7d0bed145e0041719798df6f42ed4500f99cecfae60928f159b8b2ca6d43757ee1dc85caf48c8c0e5834a3e1e40da202c5b2df190fa43551a8875378eb691081db654bac75f21db75f34d77cd286b937594c1d7a68a323854a95d73fb8b3cce37fcd2fede26934f676fc", 0xf3, 0x20000000000000}, {&(0x7f0000000480)="0eda01ba857fba7e0a9b6c6d01d01719feb3393133613bdfcf4c103fbf83ba388d37eab8c3c825d49ff604276a6615bfbaafd37a9f97802aaf1963f57c7c7c2dd254cf8dc5938ef779146abc18ef9d", 0x4f, 0x1f}, {&(0x7f0000000500)="6bfbc56c9ff69f59f2c265d75c571d3a8b725368a8be0389f5d10c7f4653fce082d3182cd4da722e40f32fe17bd67013c4c5cba32cb36eaecb93fe372602c5a1c9987bdcf771ad2ec89793390094384d274b3d6fc76fd639f54f6dc9b457799c141d58154c8d72c4dbc4c063ae702ceb425982a0025ea48b424ea470730b0b26c795a35e7e235ccaae1638bdac2a9778cff44f766f5ae757729a076f1dc879e693a5eb4ad4e99b574fc2e7b4b4d9c0fb8cb7db156275e82e124d6721e1383744e5b2", 0xc2, 0x4}, {&(0x7f0000000140)="d9d09ae4003aff4f56513fe5a7f0ed9b77c3c8712ca7fada2f6270eb4d40d81eb44bc2a23ad259", 0x27, 0x1}, {&(0x7f0000000600)="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", 0x1000}], 0x1040000, &(0x7f00000018c0)={[], [{@fowner_lt={'fowner<', 0xee00}}, {@fowner_gt={'fowner>'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, 'ramfs\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'incremental-fs\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'tz=UTC'}}, {@dont_hash='dont_hash'}]}) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)=ANY=[@ANYBLOB="400000006404000229bd7000ffdbdf25fb20e8e02ed53277ce1bcdf9f24f35df0a39a2938a754d24c4a6d90cb781e76fe4713705ee6254496cb1181455928600"], 0x40}}, 0x4000040) [ 658.172236][T22740] fuse: Bad value for 'fd' [ 658.182917][T22740] fuse: Bad value for 'fd' [ 658.188152][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c08001b"], 0x30}}, 0x0) 20:47:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000040)='udf\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xe703) [ 658.245566][T22761] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 658.280015][T22770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000d08001b"], 0x30}}, 0x0) 20:47:40 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc3ffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x0, 0x800, 0xc3, &(0x7f0000000000)="dc10cf9d812b30453f4ec5815a40adfb2abacb772295f099734d2cfe51eec49e9075214db2894394d235c2c8ef34ddf8a866a382d55a6a5767113ce5e71a2f31a9b4928e4e3225645fff4e349dc615b978c497c6e2c126200124c0b29a22c79492bbb817efe3ab13e843a662769ca2885539d1b480fbdbd94faef9302e118b574be2439c748cb7a408937a704e1e961f00f72e9a7d38b865b27f0c734d196f0f332760e889a47059bf4b3a11452cabd16fb69e87f38e5f9eb38b62f02cbd8628fc06e6"}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xf504) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e08001b"], 0x30}}, 0x0) [ 658.290728][T22761] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 20:47:40 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0xffffffffffff048e]}, 0x8, 0x80800) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xc6a2043a, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000001108001b"], 0x30}}, 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x80040) 20:47:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f00000001c0)='./file0\x00', 0x27fd, 0x4, &(0x7f0000000680)=[{&(0x7f0000000380)="a171acfd316e7aa56666276755f327a32f2210f1fa011acd61a5cbd52440008b1ccfcc92f2aadfcefd48ddf7a718510919c85a72fcf7c9a0b9686ae558d011eb773c6d59fc9187be0dc981e419de15b61a415f2398f17c8b4cc149d7f14c435b7762b07440b92bdd2fbf866bbe643043f2f79d568607728d67b7ac83b1f9a3619655a204ea1910af2f6824ee780fac9e739910ff2ed63f2bf4769338eb01041fb4d774d156b3acb30b577f4624a0f2de21a322abcf575510663f74b039e8d385ed92a22a86ebd4a63a00f5ee930b58a7a6fa0615320efb7bd1fdc3455fda6aebef28511606177f08e296ba6e", 0xec, 0x4}, {&(0x7f0000000480)="993dc0b4810b466448ffd4d49ec87ae67ffacb3c1c17e4ad93955af90e9303e848a0bac3b4761be622432e42d59d5f50227c514cfd11fd1a588dc84993058c1eeb2911abd7fc98c615b00dcbd0158c1673e20b2bf000a1f20f56b1905d2688819a04cd003e5c95bc0f43b891a0190a6d1ca9c1ee8271821278f793211b6ca8fb2a33af935ccafd3c8bc68c8699c13d95236e967f070fa7dc46f6b7e703831e775bc01c35ab21c3e3621740d2ddd9734adc09f85f759d61b212dbc513bf6d01d17adfc63d014267ee4e192f20f72d6f976706e5c0b2a45e9069d83d6350877673a06f", 0xe2, 0x9}, {&(0x7f0000000200)="c5a02e878a05f2529971b0f55a891f33c1efeca6aef12941e6a9543906fd8a15208a069030aadb3fc4935b7dd3268eb3a8379568f0053c33c32be4ef5e7b342519073f2b267459fe9bb4e83ea2611069251de18540993536", 0x58, 0x8}, {&(0x7f0000000580)="6167f6b9cdd8d8b52527e6862b58847079e82a15921c72c04d1d426af7aeb08b3920219e31ced285b2097f7267a484fd11026b5bc1c32afc671dc48e4f283c5836b8f71f3deb393bedd4137e90a4a8f4e4a41796a0621bb0911b383638707a8d341607a25e40f17874ec48da4374a2a7fc402df7ed1f3996e2ce8583ac36e638a35e1f208a221d7611330ba46dc1c9d2adb24a7212efcbc61e6e7972286a50e141627b9efaa52a7b5dba80354a88ed1d7067713ea2219a052029d89ca46beec20a35c50ea17e22c27ff5935d60918543aeb6", 0xd2}], 0x48000, &(0x7f0000000700)={[{@numtail='nonumtail=0'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@shortname_mixed='shortname=mixed'}, {@shortname_winnt='shortname=winnt'}, {@rodir='rodir'}, {@shortname_winnt='shortname=winnt'}], [{@subj_type={'subj_type'}}, {@dont_appraise='dont_appraise'}, {@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, '@('}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@subj_type={'subj_type', 0x3d, 'incremental-fs\x00'}}]}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)="86180f7894814025997305ee60228822b8bb321b9a71937b3d29c7c3313bffb0cc09c98836726d3b7ea3da11bb4d4cf9060e7089548f5b96ced20b7f054e4ef4455a15695d94f750f528047b7d0288e0fd45002f4b22f4f762d60c222fe25ef74b843fa2f9dfb721707c8f123cc30200f0cfa33cbafd1af35ab2905b21c76a225c2a569ac8511a484f6038c094513cc14c443019b2426450778572e431") r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000100)=0x42, 0x4) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) 20:47:40 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd0260000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x40}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000380)=""/4096, 0x1000, 0x1, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000001208001b"], 0x30}}, 0x0) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x1000000) 20:47:40 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xd8ffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x5) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000002008001b"], 0x30}}, 0x0) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xdcedc4f5, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:40 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x100000003, 0x0, 0x0, 0x294accc, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x6, 0x2, 0x7}) r2 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0xc, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x1, 0x0, 0x0}}]}]}, 0x2c}}, 0x0) r5 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0xc, 0xc, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x1, 0x0, 0x0}}]}]}, 0x2c}}, 0x0) r8 = socket$inet6(0xa, 0x8000080003, 0x800000000000005) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xc, 0xc, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x1, 0x0, 0x0}}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x128, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x800}, 0x10) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x2000000) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000002508001b"], 0x30}}, 0x0) 20:47:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x2, 0x4e23, @private=0xa010102}, 0xa1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='wlan1\x00', 0x8, 0x5, 0x49e3}) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe0ffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000004008001b"], 0x30}}, 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x3000000) 20:47:40 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2a7, &(0x7f0000000380)={{0x12, 0x1, 0x340, 0xfa, 0x5, 0xfd, 0xff, 0xd46, 0x81, 0x509d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x295, 0x1, 0x4, 0x4, 0x0, 0xd, [{{0x9, 0x4, 0xd, 0x0, 0x9, 0x1c, 0x61, 0x9f, 0x7, [@uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x0, 0x3, 0x9, 0x3f, "104e59669623d2"}, @as_header={0x7, 0x24, 0x1, 0x32, 0x80, 0x5}]}], [{{0x9, 0x5, 0xe, 0x8, 0x400, 0x0, 0xee, 0x1}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x2, 0x2, 0x2, [@generic={0xcb, 0x30, "7981d2faaa7da723b37247a3c358e01aec5c11cc2a290e54fd7533d6df8858f612a720435931d91e07f8414da2a6e9f4e41cd2e15d4bdf9b1c421970f78af941d5d1599d974e3bdb9cbe19e25931cc491c4d54e46e3d3c7efb282b9c62792c9be9a05feecd6ad2066983c73867a5666ece493a90944b870dfae353db2f3be9ad4d8e078eb3b2de7a2d423457229497e8c765fb36db2a9dca498e661bda3d5c818bf6637a6e3ea0a99db47af53b05e5a83c08d3291a3abfa587b3c5c7c0e4c9ee5ff68442a82f98d748"}, @generic={0x9c, 0x30, "2ad47d46ff66ab54ad8c0259d8305ce0e0f453cba6f172a58776d21096dcd1ceb0b9f25e14c7312cd5ea24396faadd45ae499be92f830e8d2f396ced150877a8a9ee85b922b54db2329a4ef2a82804dd81d618dd7ded408415267e4de98d520c479ff20f2ce7cf912a24af8317f1d0923b7b51fa710c2f4d36e5b59171aab24c01dc4d8e97488a0a27c2556fa562c2bc74bdddf7830c043f5e12"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x40, 0xf0, 0x3f, 0x9}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xab, 0x3}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xfc, 0xb8, 0xe1}}, {{0x9, 0x5, 0x1, 0x2, 0x2f35a1c86947fece, 0x81, 0x34, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x100}, @generic={0x30, 0x6, "604a20caf7e47b8a90adb217d5057a03981d69305009b6ee92ccc3cc1717203fef2e8421c60c57dcac3ad63ba590"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x10, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0xa, 0x0, 0x8}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x4, 0x82, 0x4, [@generic={0x77, 0xe, "82e4658361fbdbec70f1afeee55e889a9ad3ea916eb8daa8fba84d8d4956960cb853e6e5c23ab6e948f2121c3d3d4f7c1029e03cce4fa43cbbf0866d8cdbc58041c8136e7ffe6ed3a3471d032426eb8566e7874ad85237fd67c76b3201c71af85ecd85de4f1cc2bbc252f4e28d166727f165d61cd6"}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xff, 0x5, 0x1, 0x20}, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f3900060a1003de0200080c08000b100104080004c70500040a10030003000280040003100b0b10010c75001f8101000007100210b30400"]}) ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f00000001c0)=""/236, &(0x7f0000000140)=0xec) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 658.648267][T22846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22846 comm=syz-executor.4 20:47:40 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xe4ffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000004808001b"], 0x30}}, 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x4000000) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000004c08001b"], 0x30}}, 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x5000000) 20:47:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x2040, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000100)) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x11) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000006008001b"], 0x30}}, 0x0) 20:47:40 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:40 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x6000000) 20:47:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000006808001b"], 0x30}}, 0x0) [ 659.000767][ T9656] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 659.240762][ T9656] usb 5-1: Invalid ep0 maxpacket: 512 [ 659.390752][ T9656] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 659.630718][ T9656] usb 5-1: Invalid ep0 maxpacket: 512 [ 659.636163][ T9656] usb usb5-port1: attempt power cycle [ 660.350660][ T9656] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 660.440723][ T9656] usb 5-1: Invalid ep0 maxpacket: 512 [ 660.590664][ T9656] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 660.680699][ T9656] usb 5-1: Invalid ep0 maxpacket: 512 [ 660.686265][ T9656] usb usb5-port1: unable to enumerate USB device 20:47:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xff74, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={&(0x7f0000000080)="855df45cbcebc3828c7e2cc3b71e0b01b3a5fce3992fb7b3572880a8d9bf32304cbd74ac4fb08152f651a78d0c9bee2e6eb14b3527ddb2b78e004a732328e06f2515c312c61b676a237e0a8b5b44223f8034b760fc17a02a629cbc6bafdfce7bfdad5c67b5a08188bc0d2de5fee002cbe4d2114e5adca3bf95f278559e6f3368cf66a9d000e7f4eeb553c7840f733fe97b2195c8f3276181baab1168d7c7aa8656fdf74c369515eb258e2d088630dc05fee64ab9bc2cbfbad393b8a4b0baa98c88e57dcc6cbbf4f129b972af6be80a8aa1", &(0x7f0000000380)=""/173, &(0x7f0000000280)="bd8ca1e39b5d8b1abcc7", &(0x7f0000000440)="ade119c2deea61c8c0e53a6829a5a1b03defdfd89f9f018289cb828fbb007e850b2e288cf5fad2674062ddef8756adcef87c6676f67d9dbe3b77d44b4b1c985e0d58fd22ed121ad033363b782760e54ebed535e7c7418b777cb9fcfac7302751aa9044993c5cff9c3a278f768631777bbc183741a8745224a0bf0e28dc05130476bc606831d96b0154e68c1da6febf865aad92bd0df28614b8fcbb94863858a39409a60d4dccc6dafdb0d83f731e192a166df86ec876ef3dbdb567733651980be9f7", 0x5910, 0x1, 0x4}, 0x38) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xea030000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x7000000) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000006c08001b"], 0x30}}, 0x0) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000017208001b"], 0x30}}, 0x0) 20:47:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc0, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_IE={0xf, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_chsw={0x76, 0x6, {0xbc, 0x2, 0x40, 0x9}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x12}, @NL80211_ATTR_IE={0x51, 0x2a, [@tim={0x5, 0x17, {0x5, 0xd5, 0x8, "6e21310c7e1418746fc9bc5ebc845011abf67618"}}, @ibss={0x6, 0x2, 0x2}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0x74, 0x6}}, @prep={0x83, 0x25, @ext={{}, 0x6, 0x9, @device_b, 0x8000, @broadcast, 0x0, 0x3fff80, @device_a, 0xbca8}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x67}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004001) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x8000000) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000007408001b"], 0x30}}, 0x0) 20:47:43 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xeb260000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x7, 0xaa2}) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000140)={'dummy0\x00', {0x2, 0x0, @remote}}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x3801, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r1, 0x0, 0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file0/file0\x00', 0x10000052) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x80001, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0x200, 0xffffd7d6, 0x7}) 20:47:43 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = open(&(0x7f0000000080)='./file0/file1\x00', 0x281, 0xca) ioctl$TCGETS(r2, 0x5401, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000380)={{r1}, "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"}) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000007a08001b"], 0x30}}, 0x0) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10100, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'io'}, {0x2b, 'memory'}, {0x2d, 'io'}, {0x2d, 'io'}, {0x2b, 'io'}, {0x2d, 'cpu'}]}, 0x1d) socket$pptp(0x18, 0x1, 0x2) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:43 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf4ffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:43 executing program 5: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="3000000029020009000000100000002001000000000000000600000000b100001f0d002e2f66696c61302f66e96c6530"], 0x30) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x180) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x9000000) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(0x0) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000900001b"], 0x30}}, 0x0) 20:47:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000380)={0x0, 0x5, 0x1, [0x3, 0x80, 0x40, 0x0, 0x7fffffff], [0x80000001, 0x3, 0x7, 0x6, 0x0, 0x7, 0x9, 0x1, 0x7, 0xfffffffffffff9a9, 0x1, 0x9, 0x101, 0x5, 0x0, 0x7, 0x8000, 0x1f, 0xe7ea, 0x4, 0x3, 0x7d15, 0x3, 0x1, 0x7f, 0x7, 0x4, 0x2, 0x9, 0x0, 0x7, 0xffffffffffffffa0, 0xfffffffffffffff9, 0x6, 0x5, 0x9, 0xff, 0x8, 0x0, 0x5, 0x4e, 0x3, 0x7, 0xc835, 0x3ff, 0x6, 0x2, 0x1, 0x40, 0x5, 0x6, 0x6, 0x8001, 0x6, 0x1000, 0x358, 0x1, 0x5, 0x9, 0x821e, 0x3, 0x9, 0x101, 0x2e1, 0x8ce0, 0x5, 0x2, 0xab8, 0x0, 0x2863, 0x401, 0x4, 0x80000000, 0x5, 0x2, 0xfc, 0x0, 0xff, 0x2, 0x8001, 0x1, 0x1, 0x401, 0x1f, 0x4, 0x8, 0x6, 0x3b, 0x8000, 0x727, 0xfffffffffffffffa, 0x4, 0xffffffffffffff00, 0x40000000006, 0xc8d, 0x4, 0x8000, 0x1, 0x5, 0x5, 0x2e7, 0x4000, 0x3, 0x800, 0x6, 0x5, 0x3, 0x41d, 0x3, 0x7, 0x0, 0x9, 0x80, 0x3, 0x9, 0x401, 0xe72b, 0x5, 0x6, 0x9, 0x84]}) 20:47:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x9, 0x3, 0x1, 0xffff, 0x14, "99339fc79ba0ec91"}) lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(0x0, 0x0) 20:47:43 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf5040000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xa000000) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c00001b"], 0x30}}, 0x0) 20:47:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='incremental-fs\x00', 0x18f9617, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(0x0, 0x0) 20:47:43 executing program 4: write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000000c0)=0x3f, 0x4) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x1040000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185d42, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2}, 0x50) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, r2, {0x800}}, 0x18) write$FUSE_STATFS(r0, 0x0, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000380)) r3 = accept$unix(r0, &(0x7f00000001c0), &(0x7f0000000140)=0x6e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)={0x2, 'ip6tnl0\x00', {0x3}, 0x258}) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f00000001c0)='./file0\x00') lstat(0x0, 0x0) 20:47:43 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf5c4eddc, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000c04001b"], 0x30}}, 0x0) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/33) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x8, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xdcd, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0x9}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xffff0000, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0x1, {0x7, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x20000004, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x4, r3, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r5, r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}], [{@euid_gt={'euid>', r0}}, {@smackfsdef={'smackfsdef'}}, {@euid_lt={'euid<', r1}}, {@obj_role={'obj_role'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r2}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xb000000) 20:47:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf6ffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:43 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='incremental-fs\x00', 0x2008040, 0x0) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000e04001b"], 0x30}}, 0x0) 20:47:43 executing program 4: ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x0, 0x6}, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}]) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:43 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/33) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x8, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xdcd, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0x9}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xffff0000, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0x1, {0x7, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x20000004, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x4, r3, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r5, r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}], [{@euid_gt={'euid>', r0}}, {@smackfsdef={'smackfsdef'}}, {@euid_lt={'euid<', r1}}, {@obj_role={'obj_role'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r2}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf8030000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 662.096550][T23005] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 662.114968][T23011] overlayfs: unrecognized mount option "euid>00000000000000016384" or missing value 20:47:43 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x9686, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x28) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0xdc, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x33}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "06397991b96430cede87290bc5"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "309e48a8a7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "fdb1391084"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0xdc}, 0x1, 0x0, 0x0, 0x10}, 0x8040) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xc000000) 20:47:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000208001b"], 0x30}}, 0x0) 20:47:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x1, 0x4, 0x7}}, 0x14) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000308001b"], 0x30}}, 0x0) 20:47:44 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xf9fdffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/33) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x8, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xdcd, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0x9}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xffff0000, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0x1, {0x7, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x20000004, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x4, r3, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r5, r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}], [{@euid_gt={'euid>', r0}}, {@smackfsdef={'smackfsdef'}}, {@euid_lt={'euid<', r1}}, {@obj_role={'obj_role'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r2}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xd000000) [ 662.161209][T23023] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 662.189379][T23029] overlayfs: unrecognized mount option "euid>00000000000000016384" or missing value 20:47:44 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffffeab, 0x0, 0x155142, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0x1, 0xfffffffffffffffd}) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xe000000) 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000408001b"], 0x30}}, 0x0) 20:47:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/33) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x8, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xdcd, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0x9}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xffff0000, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0x1, {0x7, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x20000004, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x4, r3, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r5, r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}], [{@euid_gt={'euid>', r0}}, {@smackfsdef={'smackfsdef'}}, {@euid_lt={'euid<', r1}}, {@obj_role={'obj_role'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r2}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) chdir(&(0x7f00000001c0)='./file0\x00') 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000508001b"], 0x30}}, 0x0) 20:47:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x200c008, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) [ 662.253968][T23047] overlayfs: unrecognized mount option "euid>00000000000000016384" or missing value 20:47:44 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfc000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:44 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x2, 0x0, 0x0, 0x2190074, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x8) 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000608001b"], 0x30}}, 0x0) 20:47:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/33) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x8, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xdcd, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0x9}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xffff0000, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0x1, {0x7, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x20000004, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x4, r3, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r5, r4) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x2, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@default_permissions='default_permissions'}, {@index_on='index=on'}, {@nfs_export_off='nfs_export=off'}], [{@euid_gt={'euid>', r0}}, {@smackfsdef={'smackfsdef'}}, {@euid_lt={'euid<', r1}}, {@obj_role={'obj_role'}}, {@permit_directio='permit_directio'}, {@uid_eq={'uid', 0x3d, r2}}, {@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}]}) [ 662.314826][T23065] overlayfs: unrecognized mount option "euid>00000000000000016384" or missing value [ 662.337229][T23070] incfs: Can't find or create .index dir in ./file0 [ 662.361520][T21371] BUG: Dentry 00000000b7fdde2e{i=0,n=.index} still in use (1) [unmount of devpts devpts] [ 662.371581][T21371] ------------[ cut here ]------------ [ 662.377040][T21371] WARNING: CPU: 1 PID: 21371 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 662.385517][T21371] Kernel panic - not syncing: panic_on_warn set ... [ 662.392087][T21371] CPU: 1 PID: 21371 Comm: syz-executor.5 Not tainted 5.4.85-syzkaller-00188-g8657d5d6282f #0 [ 662.402210][T21371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 20:47:44 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) 20:47:44 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xfeffffff, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:44 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) sysinfo(&(0x7f0000000080)=""/33) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380), 0x4000) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x8, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x5}}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xdcd, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r0, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(0xee00, r2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0x9}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xffff0000, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0x1, {0x7, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x4, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x20000004, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x4, r2, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002340)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r4, r3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000100)={0x18, 0x0, 0x9, {0x7ff}}, &(0x7f00000001c0)={0x18}, 0x0, &(0x7f00000002c0)={0x28, 0x0, 0x5, {{0x4, 0xffffffffffffff0a, 0x1}}}, &(0x7f0000000300)={0x60, 0x0, 0x7, {{0xffffffff80000001, 0x65, 0x40, 0x0, 0x21e, 0xdd1b, 0x702b, 0x80000001}}}, &(0x7f0000000380)={0x18, 0x0, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0xfffffffffffffff5, 0x20}, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffff9, {0x9, 0x4c214fbe, 0x0, {0x6, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffc01, 0x0, 0x2, 0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xee00}}}, &(0x7f00000004c0)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x4, 0x2, 0x0, {0x3, 0x8, 0x0, 0x0, 0x0, 0x8f, 0x400, 0x0, 0x2, 0x0, 0x1, r1, 0xee01, 0xfffffffe, 0x8}}}, 0x0, 0x0, 0x0, 0x0}) 20:47:44 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x10000000) 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000708001b"], 0x30}}, 0x0) 20:47:44 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x17e) mount$incfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='incremental-fs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') lstat(&(0x7f0000000240)='./file0\x00', 0x0) 20:47:44 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff000000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 662.412248][T21371] Call Trace: [ 662.414650][T23084] overlayfs: unrecognized mount option "euid>00000000000000016384" or missing value [ 662.415525][T21371] dump_stack+0x1dd/0x24e [ 662.415538][T21371] ? devkmsg_release+0x11c/0x11c [ 662.434093][T21371] ? show_regs_print_info+0x12/0x12 [ 662.439279][T21371] ? vprintk_store+0x690/0x690 [ 662.444024][T21371] ? console_trylock+0x166/0x1c0 [ 662.448946][T21371] ? umount_check+0xc0/0x1c0 [ 662.453608][T21371] ? umount_check+0xc0/0x1c0 [ 662.458304][T21371] panic+0x285/0x750 20:47:44 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff010000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:44 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000200)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0xff030000, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000808001b"], 0x30}}, 0x0) [ 662.462187][T21371] ? __warn+0xfa/0x200 [ 662.466242][T21371] ? nmi_panic+0x90/0x90 [ 662.470478][T21371] ? devkmsg_release+0x11c/0x11c [ 662.475407][T21371] ? is_valid_bugaddr+0xa0/0x150 [ 662.480332][T21371] ? umount_check+0x179/0x1c0 [ 662.484994][T21371] __warn+0x1fd/0x200 [ 662.488962][T21371] ? umount_check+0x179/0x1c0 [ 662.493624][T21371] report_bug+0x390/0x4d0 [ 662.495338][T23093] __nla_validate_parse: 22 callbacks suppressed [ 662.495344][T23093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000908001b"], 0x30}}, 0x0) [ 662.497934][T21371] ? umount_check+0x179/0x1c0 [ 662.497941][T21371] do_invalid_op+0x6e/0x110 [ 662.497954][T21371] invalid_op+0x1e/0x30 [ 662.526474][T23099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 662.526596][T21371] RIP: 0010:umount_check+0x179/0x1c0 [ 662.541016][T21371] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 63 3e 1d 85 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 27 54 b0 ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff 20:47:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd2174ffff43790f000038", @ANYRES32=0x0, @ANYBLOB="000000000000000a08001b"], 0x30}}, 0x0) [ 662.551246][T23102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 662.560599][T21371] RSP: 0018:ffff8881ed97fc68 EFLAGS: 00010282 [ 662.560606][T21371] RAX: 0000000000000057 RBX: ffffffff8547f6b8 RCX: ed195b87bccf2e00 [ 662.560610][T21371] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 662.560613][T21371] RBP: ffff8881ed9f8420 R08: ffffffff814e3421 R09: ffffed103ee25e08 [ 662.560617][T21371] R10: ffffed103ee25e08 R11: 0000000000000000 R12: dffffc0000000000 [ 662.560621][T21371] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881e86ac000 [ 662.560640][T21371] ? vprintk_emit+0x3b1/0x500 [ 662.592191][T23104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 662.599700][T21371] d_walk+0x2e9/0x570 [ 662.599712][T21371] ? __d_free+0x20/0x20 [ 662.637629][T21371] shrink_dcache_for_umount+0x8a/0x1b0 [ 662.643059][T21371] generic_shutdown_super+0x63/0x2a0 [ 662.648311][T21371] kill_litter_super+0x71/0xa0 [ 662.653042][T21371] deactivate_locked_super+0xaf/0x100 [ 662.658380][T21371] deactivate_super+0x1b8/0x280 [ 662.663196][T21371] ? deactivate_locked_super+0x100/0x100 [ 662.668880][T21371] ? dput+0x4fb/0x5e0 [ 662.672830][T21371] ? _raw_spin_lock_irqsave+0x210/0x210 [ 662.678342][T21371] ? find_next_bit+0xd8/0x120 [ 662.682986][T21371] cleanup_mnt+0x432/0x4e0 [ 662.687374][T21371] task_work_run+0x176/0x1a0 [ 662.691930][T21371] prepare_exit_to_usermode+0x2b0/0x310 [ 662.697441][T21371] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 662.703297][T21371] RIP: 0033:0x460b77 [ 662.707158][T21371] Code: 64 89 04 25 d0 02 00 00 58 5f ff d0 48 89 c7 e8 2f be ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 662.726725][T21371] RSP: 002b:00007fff1ac1e3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 662.735100][T21371] RAX: 0000000000000000 RBX: 00000000000a1ab6 RCX: 0000000000460b77 [ 662.743177][T21371] RDX: 00000000004032c8 RSI: 0000000000000002 RDI: 00007fff1ac1e470 [ 662.751115][T21371] RBP: 00000000000000f8 R08: 0000000000000000 R09: 000000000000000a [ 662.759053][T21371] R10: 0000000000000005 R11: 0000000000000246 R12: 00007fff1ac1f500 [ 662.766998][T21371] R13: 00000000019d8940 R14: 0000000000000000 R15: 00000000000a1a90 [ 662.775474][T21371] Kernel Offset: disabled [ 662.779775][T21371] Rebooting in 86400 seconds..