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"}, {0xc8, 0x105, 0x7c, "81e6468329be7640e2441b05298fc2c264e4f3d8e6c809bcc52c7b1c0286eed6099dca9593dbb0c4e18bf7eede10633e545505c3afffe1c811fa0c9d81f042102694fc96227e0c2a153d6a0d4ab8bfe71f9537e457ff7df0b79b11f09bcd86651a4f6572ed5dc957f243afee2a319954e9936ffe0c36cb81c7070d1a7644ce547be5be6e5d636249e04ab43bc57b8ba82b21c8ef33987db540f1e2e89cdaab1079489835274c40aaa57a19566433205775"}, {0x40, 0x10c, 0xc9, "6486b11252e16a7437cf1916ed0314653412b7433966e3f8984f51f0006c55d735665b1a87292cd20c233c638e16"}, {0xa0, 0x116, 0x2, "3b841a5cef590399ead739db549ab51255357fdd964456993065d8ceacc47d6711d869ae478daa543bb0416016022ec5ad2d3876d66c29c3c9d8305065063e3cb3ef889a2503488425f0ff3f33db1b9ff46c30e09dbe0cf3262e4c797b3fb22a44107819523f66d25d75088055f43152e2e2bec2603837a1df852621d145fc84ae5d4629cbec25339f5f54c763aa6f"}, {0xd0, 0x10d, 0x200, "37f09d5ae9a306df89424cb8c02461d53ad351a6456fe4f7efd32e73abf860e112a8c36481853ae91e2c76240970444cea5c429f5d9eb9386f6f03e75fd8567c7a48bdb8a44b55a7e754eca440c78d75e2e4a9034513061d620f71a9fbe63a01bd9245683f91cdb41eab2b2b50e82119daebaae1911957437b4fc62c43c140b07f8cfd02ae8348154bd50ed1b9ec5df24cd7784f8573986632d463cfd2e7b3369c073f34a4c6ad1a2ac24289813dcb1cec943e6c5018165bc705bfcfca"}, {0x58, 0x103, 0x4, "f77701d9cd7f3d012bfdfa628535540387b8fc975b6cfced38cbe43ae70938aaeb7b878cb454a46674fc2a6e1092188a0e0b0a56e31311afc2921bb8b0338b477201a62476babd"}], 0x1380}, 0x20000000) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r2, 0x8906, 0x0) 10:19:14 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x40) write$P9_RREMOVE(r2, &(0x7f0000000280)={0x1}, 0xff7f) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r4, 0x2081fc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r7, 0x0) read(r5, &(0x7f0000000000)=""/250, 0x128b9372) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r8, 0x4, 0x40400) write$FUSE_WRITE(r8, &(0x7f0000000080)={0x18}, 0x18) fcntl$setstatus(r3, 0x4, 0x6100) fdatasync(r2) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xf642e7e) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:14 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='over:ay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:14 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x141000, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000100)={0x7, 0x7f, 0x2}, 0x7) ioctl(0xffffffffffffffff, 0x1800008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x800, 0x40000) setsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @remote}, 0x8) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f00000001c0)="06e4060134c9c06bb936028983fcc54b64a349645d7f9d60de54ef8158fb2494b9e8ac13d6061d7cd9f69266075b1d9f3ebcb086484ad55b82738d388ac3fe845cc0187d46036b16f0fc7bdc", 0x4c) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000400)=0x1, 0x4) ioctl$VT_WAITACTIVE(r2, 0x5607) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000180)=0x1e) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, [], [{0x7066, 0x0, 0x0, 0x1, 0x3, 0x8}, {0x1ff, 0x3, 0x3, 0x7, 0x0, 0xff}], [[], [], [], []]}) [ 588.864923][T28981] overlayfs: './file0' not a directory 10:19:14 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 10:19:14 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75000040fc642e2f66696c65302c6c6f7765726469723d2e2f66696c66696c65315c0000000000000000000000000000"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:14 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overLay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:14 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000080)={0x100000001, 0x0, [], {0x0, @bt={0x4f2, 0x7, 0x0, 0x3, 0x48c, 0x2d1, 0x0, 0xfffffffffffffffb, 0x34d, 0xe891, 0x5, 0x5, 0x3, 0x3, 0x1, 0x1}}}) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:14 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) [ 589.033995][T28997] overlayfs: unrecognized mount option "u" or missing value 10:19:15 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) [ 589.097964][T29005] overlayfs: unrecognized mount option "u" or missing value 10:19:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='over\\ay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:15 executing program 4: time(&(0x7f0000000040)) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x100) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x1, @mcast2, 0xffff}, {0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, 0x5, [0x4, 0x8, 0x3ff, 0x400, 0x6, 0x4e9, 0x6, 0x3ff]}, 0x5c) [ 589.144339][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 589.144355][ T26] audit: type=1804 audit(1547720355.021:133): pid=28997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/831/file0/file0" dev="sda1" ino=16554 res=1 10:19:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@metacopy_on='metacopy=on', 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) accept(r0, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x80) [ 589.248205][ T26] audit: type=1804 audit(1547720355.021:134): pid=28997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/831/file0/file0" dev="sda1" ino=16554 res=1 [ 589.402537][T29024] overlayfs: unrecognized mount option "metacopy=on\" or missing value [ 589.428026][T29025] overlayfs: unrecognized mount option "metacopy=on\" or missing value [ 589.448156][ T26] audit: type=1804 audit(1547720355.331:135): pid=29024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/832/file0/file0" dev="sda1" ino=16557 res=1 [ 589.475010][ T26] audit: type=1804 audit(1547720355.331:136): pid=29025 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/832/file0/file0" dev="sda1" ino=16557 res=1 10:19:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overuay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:15 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 10:19:15 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200800, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x5) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x89e2, 0x0) 10:19:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x77359400}}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:19:15 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:15 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x6, 0x5, 0x10000, "61c211e51e2170aa8f10de327d0be7b823d4cf25aa1d1a91b68f696177d2d1578d50592455d03a63990972fc8c9c30b8b75fc368b45b3ec1422de4dff7ca74", 0x16}, 0x60) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x8906, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x0, 0x0, 0x5}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x80000, 0x0) 10:19:15 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x6201, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) [ 589.640444][T29043] overlayfs: './file0' not a directory 10:19:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='over\x88ay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:15 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:15 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./nile0,lowerdir=./file0,workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) [ 589.691975][ T26] audit: type=1804 audit(1547720355.571:137): pid=29043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/833/file0/file0" dev="overlay" ino=97247 res=1 10:19:15 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f313d4d4ece13009488a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overl\ny\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 589.825209][ T26] audit: type=1804 audit(1547720355.571:138): pid=29043 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/833/file0/file0" dev="overlay" ino=97247 res=1 10:19:15 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20080, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080), 0x4) 10:19:15 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overl%y\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:15 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:15 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x600) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) [ 589.901087][T29062] overlayfs: failed to resolve './nile0': -2 [ 589.957003][T29069] overlayfs: failed to resolve './nile0': -2 [ 589.976883][ T26] audit: type=1804 audit(1547720355.861:139): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/834/file0/file0" dev="sda1" ino=16531 res=1 [ 590.068122][ T26] audit: type=1804 audit(1547720355.891:140): pid=29069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/834/file0/file0" dev="sda1" ino=16531 res=1 10:19:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overla\n\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:16 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x6, 0x8, 0x3, 0x5, 0x2, 0x1}) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) close(r1) 10:19:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000002c0)={0x401, 0x2, 0xc72, 0x0, 0xb007, 0x101, 0x2}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendto$inet6(r4, &(0x7f0000000080)="8143789aea162439c00c84a6d518c36b6421ba4f3abdc0977851b9c17e6244ed7357ee3d49e9b6b156ece5852e5a53468237868ce829ad477cf333fa56e9f55bbb51c7dd51305439af2c3672c98bfb5becc595bc70328c143c5fd746", 0x5c, 0x80, 0x0, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x802, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x3f) sendto$inet6(r3, &(0x7f0000000140)="cfb55fabdaacd71fcffa2f2bf17c82b8a142456eaa260e7a9b8b53cf187f7ee3a284a864dbcabf45db67280d1649335e7544d0f030ed482747ec61fd4192159e188f9eccb9458d8373d9aeaf6133624c68ee1b991969f5475481c11e49a6e402d9d7e0eef1a31dc210cc4dec973229e98d32569e1306f2dd0cffb19f18f69bd6502a586e7c437e25fd2e716af8ff2e61cc1710ca95b77aa8cd52af0260c4ccd54558ff221a8158029aea3c9e5ee72c52d10d040137cfa31a802e0d01e0e751df0dc4cad4e6e9d0380e7e0094", 0xcc, 0x20000000, &(0x7f0000000240)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xa3}, 0x1c) 10:19:16 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:16 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140), 0xd1) [ 590.220303][T29086] overlayfs: failed to resolve './file1': -2 10:19:16 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x20, 0x28000) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x708a, 0x0, 0x8000, 0x1, "fbdb6fe135550b6f559e90703294eb4054e135bc9e947391acd390cbe812395c"}) 10:19:16 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) [ 590.262211][T29097] overlayfs: './file0' not a directory [ 590.301185][T29096] overlayfs: './file0' not a directory 10:19:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overla%\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x800, 0xabc3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) [ 590.308246][ T26] audit: type=1804 audit(1547720356.191:141): pid=29086 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/835/file0/file0" dev="sda1" ino=16676 res=1 10:19:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x02', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:16 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140), 0xd1) [ 590.412687][ T26] audit: type=1804 audit(1547720356.191:142): pid=29086 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/835/file0/file0" dev="sda1" ino=16676 res=1 [ 590.436315][T29117] overlayfs: missing 'lowerdir' 10:19:16 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:16 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$isdn(0x22, 0x3, 0x25) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$apparmor_current(r1, &(0x7f0000000180)=@hat={'permhat ', 0x4, 0x5e, ['\x00', 'cpusetvboxnet1%%\x00', 'GPLmime_typetrustedposix_acl_access\x00', '\x00', '$}usercpusetcpuset@\x00']}, 0x66) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x220001, 0x0) getsockopt(r2, 0x7fff, 0x2, &(0x7f0000000040)=""/128, &(0x7f00000000c0)=0x80) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 590.480939][T29121] overlayfs: missing 'lowerdir' 10:19:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r1, r0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)="a86b8e321e"}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0xffffffffffff20ef, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000140)={0x2, r3}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") 10:19:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x03', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:16 executing program 4: r0 = dup(0xffffffffffffffff) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x762, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080), 0x1) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x89e2, 0x0) 10:19:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001240)='/dev/snd/pcmC#D#p\x00', 0x9, 0x20000) sendmmsg$nfc_llcp(r1, &(0x7f0000002940)=[{&(0x7f0000001280)={0x27, 0x1, 0x2, 0x4, 0x8, 0xffffffff, "2e59e6beb8570db76f4aff1142e74579cd31c9db457a5ca38a908ba8283e863cc74a23ae45607855d0149895c1c1f9024b7ee6b72cc976c9c5ad587e0e1eb7", 0x2e}, 0x60, &(0x7f0000001340)=[{&(0x7f0000001300)="df31369a236e8765358fa4f013169dfc88a725feb62c697c0b2d0ef296b1367055e4a82d14f30de96f79ac69ca15ac0a448464c52c7c4859b812105708a04e01", 0x40}], 0x1, &(0x7f0000001380)=ANY=[@ANYBLOB="d8000000000000001d0100000700000016ed074fcecde35d4d76b7106514af1ef70c96adf6913d4db42ed2ff5ba82a222bee563412c00d0a14eb91636c29bbd8433bf62c3a93fd8486edf7fd22e339838469d8fbd80f3f4e62e4109892ca7732056166f5031257c4209526fb973fd563ef7d7e76afbc17bab2813a1aaf19406aefc80acb5c78efb7182a1fcd3758a15985489322d9d75fa7dbb14cd7c60130b6d8f6b0697bee86163e41748f5e8343531c62093d0c1d4a3aba52a979c39df29e9950aade8d8533bdf6f80db0df526b96ec876b89ead29700"], 0xd8, 0x80}, {&(0x7f0000001480)={0x27, 0x1, 0x2, 0x6, 0x800, 0x8, "c8f82a6c170857df6cd5505156b3684c49187f1a1271af40326f175347b69ba9770d8d23e110c0ddfaf18406871efdb4023b29b0ed81852f7408f2693b471a", 0xd}, 0x60, &(0x7f0000001880)=[{&(0x7f0000001500)="7a980dbf807f", 0x6}, {&(0x7f0000001540)="29ba4e987f1c8f88c6c33e6c488a451cf3c1be1dc86429671b9ec6d98117445f2368d40f25813a21379ad1965de9e5a6c9256e09eeb2366e65e089cbd8465a64bb5e89181e909cc2dcdccfb40992979182c90fa6f1674c9842c64788a1c39e258ec33aa0ee77c6648c947ec104c1678f01285b54d3b4b74da569c857e858f95db48d", 0x82}, {&(0x7f0000001600)="65be97c2b596feca53cf63a0c9910b64150d8d2eecc2fff2ef2caa559bf8f5495343c03aa77caf22ca21bf23039f32bed7a27651b8aaa224a87f219301055baaf90035b69235e49fe66c870680470053314586b44fd05ec1a82e3af69fed3ecfd091a2bb77dd03a5e2172e36995dfb32983e1e9f7480cb7f34df3b72863508edaf40a7c99a7444d65119c78303049c1eebf0d050dcb145bb175729794137752d2e79d98512aa5d8778a981add796a70f81", 0xb1}, {&(0x7f00000016c0)="628928cb6fa9f2b0de11ff6c5bdbf147a81c7ff813da57e8414b80164173d5456146a7afe1a1d7dfe4ae1f3e8431c3ca4828ad7ea5d6f5eaae59609b85b69cc87c12fd", 0x43}, {&(0x7f0000001740)="934ab4aa966e82cdf7b89432d22245d0e915ccb7c383e8bd5ff047fe2920a32a2e0b7b7adde32a173d4307e372696ddeb2c194dd6d84a7d78613560a86ed2fe86cf9de5549ab82759414ea085580b22db3df8af9120b8a4c6bcca219a16e8ab9044f379ee2b13dd5a2bc0c1981042f357e0f3da3e1083a392486d5d8e6", 0x7d}, {&(0x7f00000017c0)="9be8b12b6b27de244970c38a0994775f4b527bde1575c3ff92fd7c02c08deed034d9f5b245ce8d02431707785abdc9a47b0a8901156f1eb27f60a40f5f5fc2a1596e2f5dc61c187393a08b7df9db8a9ad76fa6bb683773d674ff06289b380b95031237dacb9da5ca3a9883cd8e31f5fe95989d01768467eb4c629122a9c4c205f95dbebe7ee1d6a7ee3799136fe61d5a47b9b8bd9848a4f133d842600b187caa8b479ee5d6541fab9a3cc0fc07bcb735adf81a216c452fc25a04", 0xba}], 0x6, &(0x7f0000001900)={0x1010, 0x113, 0x3, "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"}, 0x1010, 0x80}], 0x2, 0x44804) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000040)=0x3, 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) bind$isdn(r1, &(0x7f0000000080)={0x22, 0x2, 0x25fd, 0x9}, 0x6) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) 10:19:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00042703edde63ec38bb936e035dd09c975ea81aa3bafa720c40eb98744d07d08d6d0fcece1e9c8364b44d"]) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x2709, 0x80000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)={&(0x7f0000000100)='./file1\x00', r0}, 0x10) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r3 = dup(r1) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0xfc00000000000000, @mcast1, 0xff}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="2700000017b4a42504ee9ee5078c626dfa69e24b6281597acd16a70c093927a256ff7be63deb5459e6bb90"], &(0x7f0000000380)=0x2f) sendfile(r2, r2, 0x0, 0xd1) 10:19:16 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000140), 0xd1) 10:19:16 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fgetxattr(r0, &(0x7f0000000040)=@random={'user.', '[\\\x00'}, &(0x7f0000000080)=""/247, 0xf7) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) ioperm(0xb1, 0x7f, 0x9) 10:19:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x04', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:16 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x402, 0x0) getsockopt$ax25_int(r2, 0x101, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') r3 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000100)=""/219, &(0x7f0000000200)=0xdb) 10:19:16 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 590.822561][T29160] overlayfs: './file0' not a directory 10:19:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x05', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:16 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(0x0, r2, 0x0, r1, 0x9) sendfile(r1, r1, 0x0, 0xd1) 10:19:16 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40, 0x0) sendmsg$rds(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/204, 0xcc}, {&(0x7f0000000400)=""/91, 0x5b}], 0x5, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000540)=@generic={0x0, 0x5, 0x3}) 10:19:16 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0xd1) 10:19:16 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$dmmidi(0x0, 0x6, 0x200000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000100)) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8f2f, 0x2c000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000080)=""/21) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:16 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:16 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x06', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:16 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000080)=0x1f) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0x3f, @empty, 0x4e24, 0x1, 'fo\x00', 0x18, 0x0, 0x33}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2000, 0x6, 0xfffffffffffff001, 0x1f}}, 0x44) r2 = dup2(r0, r0) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x20) 10:19:16 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0xd1) [ 591.051671][T29181] overlayfs: './file0' not a directory 10:19:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0098dac5bf04faad20c8e1bbb8fe32c23d210effb4"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:17 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:17 executing program 4: socket$nl_crypto(0x10, 0x3, 0x15) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x80000000, 0x80000) bind$netrom(r0, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @bcast, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x89e2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f00000000c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) [ 591.103877][T29192] IPVS: set_ctl: invalid protocol: 63 0.0.0.0:20004 [ 591.117832][T29194] IPVS: set_ctl: invalid protocol: 63 0.0.0.0:20004 10:19:17 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\a', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x3) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0x0, 0x4}) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x94, "91e1086797c15601feb7825430490affb5de45bb2e70bb134c1c1f58fc829cbca548db884314985493dee39f82229bb13b74bdc19b654f2031dd7947304d456ec78b41d10eb413f8fe5102c2228d3d14269e602a56a6de3c38d6ca6cbc3c482ea04d353df2ffed562f89233df2f23279cc12d3e338a8f7c09152e60c54b5bd063a41b8bf1bc6c43a65ccce41f3f776ba3b65844e"}, &(0x7f0000000180)=0x9c) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x200}, 0x8) 10:19:17 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000140), 0xd1) 10:19:17 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0x80) setsockopt$rose(r0, 0x104, 0x5, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x8906, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x56a) 10:19:17 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 591.267503][T29212] overlayfs: './file0' not a directory 10:19:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f025caf61a38445e9") r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x0, 0x3, 0x1}}, 0x26) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:17 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\b', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000880)='./file0\x00', &(0x7f0000000940)='overlay\x00', 0x1000000000, &(0x7f0000000840)=ANY=[@ANYPTR=&(0x7f0000000900)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRES64], @ANYRESOCT]]) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x100) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xd1) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000580)=0xe8) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x24010, &(0x7f00000006c0)={[{@index_on='index=on'}, {@xino_on='xino=on'}, {@metacopy_on='metacopy=on'}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@euid_gt={'euid>', r3}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fowner_gt={'fowner>', r4}}, {@obj_type={'obj_type', 0x3d, '[eth1('}}, {@uid_lt={'uid<', r5}}, {@appraise_type='appraise_type=imasig'}, {@euid_lt={'euid<', r6}}, {@audit='audit'}]}) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r7, 0x9}) 10:19:17 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x7fffffff, 0x400}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 10:19:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a0701581d4592c540083e11021d920dfcc87d4f96acefd76bf2d98871612a583ab1ae600ca63305fd368f3a8fa9fe82bbb493e42a8bb0e6bd6364a9860b87413ea5821eb00000000000000dec05dbaae9777a7eb2aaa9a0182b5719a17300c996a3c0e0f51b29476c8d9a33eb0ce2a22c397392a28e5ee8a2d6651af2b6dcc45cfa7a36ae8bd51c82e9ae85e9bf40f29") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 591.406059][T29224] overlayfs: failed to resolve './file1': -2 10:19:17 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:17 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000280)={0x8, 0x8, 0x6, 0x4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 10:19:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfff, 0x2000) 10:19:17 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\t', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 591.580658][T29242] overlayfs: failed to resolve './file1': -2 10:19:17 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) keyctl$session_to_parent(0x12) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffff000, 0x80) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x3, 0x5, 0xd945, 0xfffffffffffffff8, 'syz0\x00', 0x1f}, 0x0, 0x40, 0x82, r2, 0x4, 0xc000000000000, 'syz1\x00', &(0x7f0000000200)=['-\x00', 'trusted\'\x00', 'wlan1-\x00', '/dev/input/mouse#\x00'], 0x24, [], [0x9, 0x4, 0x5, 0xa2ff]}) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000180)=0x8001) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x18) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0xa, 0x0, "379dc3c6318ccf8e224c7c74a7417e95b1a01869c24ee46ff7d6bb7d710d3cd52fefbb6562bdd235203fc43f4ead8349d0283a9a63c1a872d7a8f209e8b68754", "40ab2787210711062f01c62c89add5769d18d744bb37187cc540e46438ad7bbf", [0x8, 0x5]}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 10:19:17 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x8002) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x8906, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000080)=@rose) ftruncate(r1, 0x6) 10:19:17 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\n', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 591.719847][T29259] overlayfs: './file0' not a directory [ 591.750098][T29262] overlayfs: failed to resolve './file1': -2 10:19:17 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:17 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:17 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\v', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:17 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:17 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0) recvfrom$rose(r2, &(0x7f0000000080)=""/42, 0x2a, 0x2001, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @null}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:17 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:17 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\f', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:17 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x41, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_gettime(r1, &(0x7f0000000240)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x280, 0x0) connect$x25(r2, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) write$FUSE_IOCTL(r2, &(0x7f0000000280)={0x20, 0x0, 0x1, {0x7fff, 0x0, 0x9, 0x3}}, 0x20) kexec_load(0xffffffffffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="fea1179690307af39486e250687734f49f26238df955ae54ac7a2a7df33b54bad1e889220f7e3b5daa65eb86700fde262f4f454bc28199eaeea29955c898eb0f9222b0b473ae6a5de9238215f778c670adf3c30c73f7490a3110bd4afb47387501b09441454a68d55f423da51e67ffbe8ef8f8f9df4d71cf89023ad00a38ad7650b95a8f120c3e9d712bf9b155ae53320f39b7db8fc00832e24afedd3ad9026240a4a841495f17b447a5a4145b", 0x1b7, 0x2, 0x6}], 0x160000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getuid() r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x78, r3, 0x403, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff9d}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x80) fanotify_mark(r2, 0x2, 0x1, r2, &(0x7f0000000480)='./file0\x00') ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x1000}) [ 592.000888][T29290] overlayfs: './file0' not a directory 10:19:18 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\r', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x40) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8) 10:19:18 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000240)="0adc9eb862805974301b0e1120544d47e41f02e4d36292d37af5e094ac0000000000d53c123f3188a0704e5b25d95e0fa8e310e8c82abbd0b4e965ccb5a94a9babe2e5939b27d71a5c") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000080)=[0x2, 0x2], 0x2) ioctl$sock_TIOCOUTQ(r2, 0x8906, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0)=0xf201, 0x4) 10:19:18 executing program 5: mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:18 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x0) [ 592.143149][ T7801] bridge0: port 1(bridge_slave_0) entered disabled state 10:19:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x7a, 0x80100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000180)={0x5, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000001c0)={r2, 0x2ff}) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000000c0), 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000040)='#\x00'}, 0x30) syz_open_procfs$namespace(r5, &(0x7f0000000100)='ns/user\x00') 10:19:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x109000, 0x0) recvfrom$inet6(r1, &(0x7f0000000140)=""/172, 0xac, 0x1, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @remote, 0x5}, 0x1c) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:18 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:18 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay:', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 592.306103][T29321] overlayfs: './file0' not a directory 10:19:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x7, 0x5, 0x10001, 0x1000000000000, 0x0, 0x29bd, 0x0, 0x8, 0x0, 0x5, 0xe1, 0x4, 0xa2, 0x2, 0x835, 0xfffffffffffffffa, 0x1, 0x1, 0x2, 0x101, 0x4, 0x7, 0x100000001, 0x0, 0x4, 0x0, 0x5, 0x0, 0xffff, 0x2, 0x4, 0x1, 0x80000001, 0xffff, 0x3f, 0x8, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x4001, 0x7, 0x1f, 0x7, 0xffffffffffff8001, 0x1772, 0x81}, r2, 0x0, r1, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:18 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x0) 10:19:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x800, &(0x7f0000000080)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) write$capi20(r2, &(0x7f0000000080)={0x10, 0x916, 0x1, 0x83, 0xfff, 0x6}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:18 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:18 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlayH', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000000040)="c3c7be7f91e77acc25ebfa32bf015c7eab39e9a86ad87c1529ea59e44c82966c748e43f0746e42a91f126f61c46ae147") pipe2(&(0x7f0000000080), 0x80000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x3fc) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f00000000c0)=""/55) [ 592.542493][T29349] overlayfs: './file0' not a directory 10:19:18 executing program 5: mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0xffffffffffffffff) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='upperdir=./file0.lowerdir=./file0,redirect_dir=./file0\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x400, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000000100)={'nr0\x00', @ifru_addrs=@ax25={0x3, @default, 0x8}}) 10:19:18 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0x0) 10:19:18 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlayL', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:18 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 592.712737][T29371] overlayfs: bad mount option "redirect_dir=./file0\" 10:19:18 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\\', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = dup2(r1, r0) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@remote={[], 0x0}, 0x8, 'dummy0\x00'}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000080)) [ 592.796061][T29377] overlayfs: bad mount option "redirect_dir=./file0\" 10:19:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x90d, 0x4) 10:19:18 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/llc\x00') setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@initdev, 0x0}, &(0x7f0000000140)=0x14) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000540)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000680)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000940)=0x119) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000ec0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000f40)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000001040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) recvmsg$kcm(r0, &(0x7f0000002700)={&(0x7f0000001180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001200)=""/130, 0x82}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=""/33, 0x21}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/250, 0xfa}, {&(0x7f0000002440)=""/16, 0x10}, {&(0x7f0000002480)=""/2, 0x2}, {&(0x7f00000024c0)=""/193, 0xc1}, {&(0x7f00000025c0)=""/70, 0x46}], 0x9}, 0x100) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002740)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000002840)=0xe8) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005900)={0x0, @initdev, @initdev}, &(0x7f0000005940)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005a00)={0x0, @remote, @remote}, &(0x7f0000000580)=0xffffffffffffffdb) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005a80)={'team0\x00', 0x0}) getpeername$inet6(r0, &(0x7f00000005c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000640)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000005ac0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000005bc0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000005f40)={0x0, @multicast2, @dev}, &(0x7f0000005f80)=0xc) getpeername$packet(r0, &(0x7f0000005fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000006000)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000006440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20080025}, 0xc, &(0x7f0000006400)={&(0x7f0000006040)={0x378, r1, 0xa00, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x13c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xa3, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r16}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x378}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r18 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r18) r19 = open(&(0x7f0000000600)='./file2\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r19, r19, 0x0, 0xd1) 10:19:18 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$void(r0, 0x5451) pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x55) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x8906, 0x0) r2 = accept4(r1, &(0x7f0000000080), &(0x7f0000000100)=0x80, 0x800) getsockopt$llc_int(r2, 0x10c, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x10000) uselib(&(0x7f0000001200)='./file0\x00') ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f00000011c0)={0x10000, 0x4, 0x1, 0x80}) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) [ 592.876184][T29382] overlayfs: failed to resolve './file1': -2 10:19:18 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:18 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay`', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:18 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 593.000559][T29394] overlayfs: failed to resolve '.4fihe1G': -2 10:19:18 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x8906, 0x0) 10:19:18 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 593.046754][T29403] overlayfs: failed to resolve '.4fihe1G': -2 10:19:19 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:19 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlayh', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:19 executing program 3: mkdir(&(0x7f00000000c0)='./file1\x00', 0x1) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7570706572e469727765726469723d2e1f66696c65302c776f726b6469723d2e000000000000f118670d90038fdd47a80143fbe9a8c8d6c14b5dc22b79b53393aa0de86b654f540e2f6b75f2858f8366ba659dfb1a4ab14d216a68f99c1af868c8e94dc06eb675662b8dca501312a838a200c9a73ab1d9806dd7c6806164fa12a29df35f9b8140afe53654931f8baf9d263a81b0c4d9651057ad2706707c52595318709516cace19f6277390973bf637e20d1c777a854696ad300900e1d7b099c96525659e8a827b38882f3c45d761b6f94875f853b22a73c7fdcd8145c453ba03446550d3c9c62cfc309a806f8507b648daaf693bb539504f97a5d7eea0821e5723acdd82e7b8556d7518aa7fe1fc4e233ac492882626c12a9e94217308447fd1a1dc6e2c30f83a7d5682b387a2a8a451af877eeba5"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) [ 593.118734][T29408] overlayfs: failed to resolve './file1': -2 10:19:19 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x20400, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x10040, 0x0) sendfile(r0, r1, &(0x7f0000000180)=0x30, 0xfffffffffffffffd) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x91c, 0x40) ioctl$int_in(r0, 0x5473, &(0x7f00000001c0)=0x6) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000000080)=""/101) ioctl$sock_TIOCOUTQ(r2, 0x89e2, 0x0) 10:19:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x2c00) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x0, r3, 0x1}) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:19 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 593.240734][T29424] overlayfs: unrecognized mount option "upperäirwerdir=.file0" or missing value 10:19:19 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlayl', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:19 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x4000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:19 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x52) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x91) write$FUSE_IOCTL(r2, &(0x7f0000000080)={0x20, 0xffffffffffffffda, 0x1, {0x2, 0x0, 0x7, 0x81}}, 0x20) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) [ 593.377663][T29438] overlayfs: failed to resolve './file1': -2 10:19:19 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x2, 0x3}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x8, @mcast1, 0x5}}, 0x10000, 0x863}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") fcntl$setflags(r3, 0x2, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0xc0, &(0x7f0000000200)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x9, @loopback, 0x7ff}, @in6={0xa, 0x4e23, 0xffffffffffffff01, @loopback, 0x4}, @in6={0xa, 0x4e24, 0x1000, @remote, 0x80000001}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, @in6={0xa, 0x4e24, 0x81, @remote, 0xc7}]}, &(0x7f0000000300)=0x10) msgget(0x0, 0x40) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e24, @empty}}) 10:19:19 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 593.480556][T29448] overlayfs: './file0' not a directory 10:19:19 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x6201, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) connect$rose(r3, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) 10:19:19 executing program 2: syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") 10:19:19 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlayt', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:19 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000640)="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", 0x1000, 0xfffffffffffffffc) r1 = request_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000240)='\\\x00', 0x0) r2 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300), 0x0, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000340)={r0, r1, r2}, &(0x7f0000000380)=""/173, 0xad, &(0x7f0000000540)={&(0x7f0000000440)={'sha256_mb\x00'}, &(0x7f0000000480)="a7c65be7bae62d097aced2a12f98b0a47617e079f2383eaeb83575e0e52f38ddd7b357c9181c954a286a631c854079697cc0c5eaa81b03f6fccd16b82c3dfb9d2efab40e603469cd491a131538e2939046d7125adcbbc3399aefeb4bece6c3d306e52b34813e9259903476072bf4dc213b0306f27b3f447e3a45fb67dd2d1639a4fa5943885260dc", 0x88}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r3 = open(&(0x7f0000021000)='./file0\x00', 0x40, 0x0) fchdir(r3) r4 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r4, r4, 0x0, 0xd1) 10:19:19 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:19 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 10:19:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111}}, 0x20) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000680)={0x4, 0x70, 0x4, 0xffffffffffff8000, 0x6, 0x8, 0x0, 0x10000, 0x100, 0x1, 0x400, 0x4, 0x2, 0x0, 0x0, 0x1, 0xffffffff, 0x3, 0xffc000, 0x1f, 0x0, 0x0, 0x0, 0x992, 0x2, 0xec0, 0x1, 0xbf7, 0x5, 0x1f, 0x7, 0x1, 0x0, 0x7, 0x401, 0x0, 0x9, 0x4, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x20, 0x4, 0x7, 0x2, 0x100, 0xd68, 0x73}, r2, 0xf, 0xffffffffffffffff, 0x3) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mount(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000340)='./file0/file0\x00', 0xfffffffffffffffc, 0x1, &(0x7f0000000380)=[{&(0x7f0000000540)="df345616fe38ff24ce6008ae6791b2e29ec9bc0da0d29c6e1f2a94fda94768385d4ed29ef35483ae956b5c57560f821b28994437bbb7c65c2273b659385e375617980e7a693b7108f8d8d16008ce1cbdf0d9aa155c250fa9f69b72fa82adfabf1f8ac2d8b871acb7ff3031cc583eec1d6f6cbd3973372feaf6b0059423b6e44544db959d67ac9d2774d9a7b4b12f062871552f3d56d64d2b8f131d37be0085182ddff6c5b5441626f9e2111f8306", 0xae, 0x9}], 0x40024, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000700)='/dev/midi#\x00', 0x5, 0x10000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000840)=[@text32={0x20, &(0x7f00000007c0)="0f01380fc71fc4e2790e77170fc72e66bad00466b8005866ef66baf80cb8248d278aef66bafc0ced66baf80cb84eebbe8bef66bafc0cb000eec4c179d6912b92f0b0660f38800f660f3882830d000000", 0x50}], 0x1, 0x22, 0xfffffffffffffffe, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000110, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780)='/dev/ptmx\x00', 0x200001, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000000)={0x80000000, {0x0, 0x1}}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) pread64(r1, &(0x7f0000000240)=""/231, 0xe7, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)={'mangle\x00'}, &(0x7f00000003c0)=0x54) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000480)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r5 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e23, 0xea30, @rand_addr="4f65d8e7d7e1d59a8e133125102df534", 0x2}, {0xa, 0x4e22, 0x3, @local, 0x3}, 0x50c, [0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0xc0, 0x3f]}, 0x5c) eventfd2(0xfffffffffffff000, 0x1) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:19 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 593.699597][T29470] overlayfs: filesystem on './file0' not supported as upperdir 10:19:19 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlayz', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:19 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:19 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) ptrace$setopts(0x4206, r2, 0xfffffffffffffffb, 0x46) sendfile(r1, r1, 0x0, 0xd1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000240)=""/205) 10:19:19 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:19 executing program 4: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101202, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x5) 10:19:19 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:19 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:19 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4c, 0x400) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) ioctl(r1, 0x4, &(0x7f00000000c0)="0adc1f023c123f3188a070") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x401, 0x8, 0x2, 0x7428, 0x200}) openat(r2, &(0x7f0000000000)='./file0\x00', 0x1, 0x60) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) [ 594.012728][T29502] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 594.018857][T29503] overlayfs: './file0' not a directory 10:19:19 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x9, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x89e2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x800, 0x1, 0x9, 'queue1\x00', 0x81}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000200)={0x3, @bcast, r3}) 10:19:19 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:20 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$P9_RATTACH(r0, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x40, 0x3, 0x1}}, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) renameat(r1, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file1\x00') 10:19:20 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:20 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="1f89afc529c6bd81b3bb9175d288dda1726472429239c08ceb3e6324ddc984751b5c836954f24c9f6a55af4cfcab64728daca4625ad6548f84520b9e0122161144fb357db054c60299ec298c0e085c05c03403f5e1b8d0e17b1939ae5c38e77b1df622590f8b3ea708f5411bc2b94674c579bc5270e70867b8fc03fc8c97c8764a85aba199bca23314d58bec35ba", 0x8e}, {&(0x7f0000000100)="5f334d651052a8893ecd6ee0574f43c10d8742323b51d17afb3a5dcb98c9a002e3ca0fa32c936beec213c8f782dca252d04f144248", 0x35}], 0x2, 0xd) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) [ 594.183711][T29516] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1}) bind$rose(r3, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default}, 0x1c) 10:19:20 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 594.232908][T29523] overlayfs: failed to resolve './file1': -2 [ 594.288483][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 594.288497][ T26] audit: type=1804 audit(1547720360.171:165): pid=29526 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/851/file0/file0" dev="sda1" ino=16535 res=1 [ 594.370670][T29532] overlayfs: missing 'lowerdir' 10:19:20 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:20 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:20 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x40) ioctl$KVM_SMI(r2, 0xaeb7) 10:19:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) 10:19:20 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x8, &(0x7f0000000140)=0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x29, 0x3, 0x0, {0x0, 0x8, 0x0, 'lowerdir'}}, 0x29) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xd1) 10:19:20 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 594.418289][ T26] audit: type=1804 audit(1547720360.171:166): pid=29527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/851/file0/file0" dev="sda1" ino=16535 res=1 [ 594.502039][T29541] overlayfs: missing 'lowerdir' [ 594.509994][T29543] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 594.518964][T29546] overlayfs: './file0' not a directory 10:19:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000080)={0x69a2, 0x8, 0x4b, 0x98a1b47de996c6ba, 0xfb73}) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 594.551170][ T26] audit: type=1804 audit(1547720360.431:167): pid=29538 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/852/file0/file0" dev="overlay" ino=99955 res=1 10:19:20 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:20 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:20 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x4) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x20000000000032, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x7) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0x0, 0x90, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/4096}, &(0x7f0000001280)=0x108) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f00000012c0)=ANY=[]) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="a6bad36d07b7a99d95a6752a22583ecaf4a19146331b336d5f0753ce1914a618df5c396a3ef62b5243870635866a6f221efadda71f3556e241c360c6c7ae0091ac52ba780b6855afcd785d872014189d0685fc12db19a0d19787b29ea35434576a7437f7731b0a1b6c172db06af0ea1d5cda9469c223b70898cb4eb03d39e5569aebc1342583db278d3e30e382990ae61dcd0543c803fe4baf325148e31cdcf23dbdeabfa774f0c7ce74770ad6bb9e4afc18b4db61156df742a2a67b261986ff4c076a80813f806fac0a046eadde6c77c36441b0a020e8bbb3150bc5f322d56e13013eb98b5e67ad0807", 0xea) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x6c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x28fe, @mcast1, 0x100}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r4, 0x6}, 0x8) sendfile(r3, r3, 0x0, 0x4) 10:19:20 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:20 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 594.646277][ T26] audit: type=1804 audit(1547720360.461:168): pid=29546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/852/file0/file0" dev="overlay" ino=99955 res=1 10:19:20 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x5, 0x20, 0x3ff, 0x8}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 594.703378][T29559] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 594.727960][T29565] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 594.736332][T29566] overlayfs: missing 'lowerdir' [ 594.740956][T29559] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:20 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:20 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) [ 594.770711][T29568] overlayfs: missing 'lowerdir' [ 594.828668][T29562] overlayfs: missing 'lowerdir' 10:19:20 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:20 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/snapshot\x00', 0x210000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001d80), 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/ubi_ctrl\x00', 0xa4000, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r0) ioctl$TIOCSCTTY(r4, 0x540e, 0x100000000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001e80)={&(0x7f0000001f80)=""/159, 0x20000, 0x1000, 0x7fff}, 0x18) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000001c40)={0x34, 0x0, &(0x7f00000000c0)}) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r2, 0x89e2, 0x0) write$P9_RFLUSH(r4, &(0x7f0000001d00)={0x7, 0x6d, 0x2}, 0x7) ioctl$SIOCNRDECOBS(r2, 0x89e2) recvmmsg(r3, &(0x7f0000001b00)=[{{&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000000c0)}, 0x6}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/186, 0xba}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000580)=""/82, 0x52}, {&(0x7f0000000600)=""/140, 0x8c}], 0x9, &(0x7f0000000780)=""/178, 0xb2}, 0x7f}, {{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/238, 0xee}], 0x2, &(0x7f0000001a00)=""/196, 0xc4}, 0x2}], 0x3, 0x40000000, &(0x7f0000001bc0)={0x0, 0x1c9c380}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000001f40)={{0x20, 0x9, 0x100000000, 0x7, 0x74a0, 0x4}, 0x10000}) openat$ion(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/ion\x00', 0x200000, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000001c00), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001ec0)={'vcan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001e00)={&(0x7f0000001dc0)='/dev/ion\x00', r1}, 0x10) connect$packet(r0, &(0x7f0000001f00)={0x11, 0xff, r6, 0x1, 0x10000, 0x6, @remote}, 0x14) [ 594.853734][ T26] audit: type=1804 audit(1547720360.731:169): pid=29574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/853/file0/file0" dev="sda1" ino=16533 res=1 [ 594.886574][T29579] overlayfs: missing 'workdir' 10:19:20 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) epoll_create(0x40) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:20 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 595.001330][T29585] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 595.017722][T29587] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:20 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 595.066387][T29593] overlayfs: failed to resolve './file1': -2 [ 595.069167][T29592] overlayfs: missing 'workdir' [ 595.082278][T29585] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 595.128071][T29596] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 595.129745][T29597] overlayfs: './file0' not a directory [ 595.147318][ T26] audit: type=1804 audit(1547720361.031:170): pid=29597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/854/file0/file0" dev="sda1" ino=16533 res=1 [ 595.187176][ T26] audit: type=1804 audit(1547720361.031:171): pid=29597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/854/file0/file0" dev="sda1" ino=16533 res=1 10:19:21 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:21 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:21 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x9) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:21 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:21 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 595.552441][T29602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 595.562971][T29604] overlayfs: missing 'workdir' [ 595.568439][T29605] overlayfs: './file0' not a directory [ 595.577803][T29607] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore 10:19:21 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:21 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 595.589425][ T26] audit: type=1804 audit(1547720361.471:172): pid=29601 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/855/file0/file0" dev="overlay" ino=99129 res=1 [ 595.604707][T29607] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 595.642164][T29609] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore 10:19:21 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$revoke(0x3, r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xd1) [ 595.671433][ T26] audit: type=1804 audit(1547720361.501:173): pid=29605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/855/file0/file0" dev="overlay" ino=99129 res=1 [ 595.695598][T29614] overlayfs: missing 'lowerdir' [ 595.698243][T29609] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 595.714486][T29615] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:21 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 10:19:21 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:21 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 595.872395][T29622] overlayfs: missing 'lowerdir' [ 595.881581][T29623] overlayfs: './file0' not a directory [ 595.898325][ T26] audit: type=1804 audit(1547720361.781:174): pid=29620 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/856/file0/file0" dev="overlay" ino=100055 res=1 10:19:21 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 596.080813][T29634] overlayfs: missing 'lowerdir' 10:19:22 executing program 2 (fault-call:8 fault-nth:0): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:22 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x44000) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000080)) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000240)=""/250, 0xfa}], 0x2, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x4}, &(0x7f0000000340)=0x800, &(0x7f0000000380)=0x9, 0x8, 0xfffffffffffffffe, 0x6, 0xe51d, 0x10, 0x401}}, @cswp={0x58, 0x114, 0x7, {{}, &(0x7f00000003c0)=0xffffffffffff4ebd, &(0x7f0000000400)=0x5, 0x1, 0xb526, 0xffffffffffffffff, 0x6e, 0x20}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x6}, &(0x7f0000000440), &(0x7f0000000480)=0x9, 0xfa, 0x0, 0x8, 0x1, 0x6f, 0x1}}], 0x108, 0x4000080}, 0x8000) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)={&(0x7f0000000680)='./file1\x00', r1}, 0x10) r2 = syz_open_dev$vbi(&(0x7f0000000700)='/dev/vbi#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'bond_slave_1\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000009c0)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @initdev, @local}, &(0x7f0000000b00)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000ec0)={@multicast1, @empty, 0x0}, &(0x7f0000000f00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000f40)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000001040)=0xe8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000a00)=@int=0x9, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000007500)={@remote, 0x0}, &(0x7f0000007540)=0x14) accept$packet(r0, &(0x7f0000007580)={0x11, 0x0, 0x0}, &(0x7f00000075c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000007e00)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000007f00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000082c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000008280)={&(0x7f0000007f40)={0x304, r3, 0x802, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xb4, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x98}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xd7}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xd0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x7, 0x10001, 0x80000001, 0xce67}, {0x4, 0x8, 0xfffffffffffffffe, 0x644b}, {0x3, 0x0, 0x100000, 0xe67}, {0x2, 0x3, 0x2, 0xa2}, {0x1f, 0x0, 0x485, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0x40}, 0x1) r14 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r14, r14, 0x0, 0xd1) 10:19:22 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay ', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10100, 0x0) 10:19:22 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:22 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:22 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x4002) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 596.475646][T29638] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 596.484664][T29641] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 596.484688][T29641] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 596.517420][T29638] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:22 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 596.563757][T29650] overlayfs: './file0' not a directory 10:19:22 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:22 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) dup(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) [ 596.633968][T29655] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 596.638503][T29658] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 596.673964][T29658] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:22 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x10', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) readahead(r0, 0x9, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:22 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:22 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x3, {0xa, 0x4e20, 0x2, @rand_addr="7e439a1343037b71567c82f6156e2e58", 0x6}, r3}}, 0x38) [ 596.846786][T29675] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 596.870674][T29675] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:22 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 596.899704][T29676] overlayfs: './file0' not a directory 10:19:22 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 597.080950][T29686] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:23 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140), 0xd1) 10:19:23 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x5, &(0x7f0000000040)) sendfile(r1, r1, 0x0, 0xd1) 10:19:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = dup(r0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000180)={0xffffffff00000001}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x1}, 0x28, 0x1) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f00000000c0)={0x6, 0x1}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:23 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:23 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:23 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2, 0xd1) [ 597.313232][T29694] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:23 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:23 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x404001, 0x0) getpeername$netlink(r1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 10:19:23 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 597.362802][T29704] overlayfs: './file0' not a directory [ 597.362843][T29701] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 597.385239][T29701] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:23 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x9) fchdir(r0) recvfrom$unix(r0, &(0x7f0000000080)=""/8, 0x8, 0x40, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:23 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") prctl$PR_SVE_GET_VL(0x33, 0x3cac) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 597.518117][T29711] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:23 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) [ 597.630917][T29720] overlayfs: './file0' not a directory 10:19:24 executing program 0 (fault-call:3 fault-nth:0): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x40000) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000300)={0x9, @raw_data="08eb50973b5efceb85ede73e6fb35e0f9659755c5c1c335f5f611992927e6f221a5f8bf109a7472d321158a9dad30a8ae25bc5dbc735f3daef7a5d5163751de98b5a87b8e766136d73db1692d0c86f1dac913bb7d634897fc9ad3f613ff08f6675a8b47a4c0456792b1b6cb93735242a8bc2385ae9e53664e443418120f10ee30d0e02833809a6966766a0a16e1d8837bdc7df54bc694ec21e28d2ec886b71cdcf1d2a88141653d31e55393f5b394ce879730c3b4d49104cd837e4babf9046e99835ce0439e69e87"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x5, 0x9a, [], 0xb4d1af8, &(0x7f00000002c0)=[{}], &(0x7f0000000200)=""/154}, &(0x7f00000001c0)=0x78) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write$P9_RAUTH(r1, &(0x7f0000000840)={0x14, 0x67, 0x1, {0x20, 0x3, 0x2}}, 0x14) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000080)) ioctl$sock_TIOCOUTQ(r1, 0x89e2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="050000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e207f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e237f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) 10:19:24 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:24 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:24 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x80002, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x200, 0x1, 0x5, 0xc6, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0x81}, 0x8) [ 598.120313][T29728] overlayfs: './file0' not a directory 10:19:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x3, 0xd1) 10:19:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:24 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 598.207633][T29738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 598.239358][T29742] overlayfs: filesystem on './file0' not supported as upperdir 10:19:24 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:24 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2010}, {r1, 0x2}, {r1, 0x2}, {r2, 0x1000}, {r2, 0x8000}], 0x5, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)={0x7}, 0x8) sendfile(r1, r1, 0x0, 0xd1) [ 598.312023][T29738] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x2, 0x0) 10:19:24 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:24 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) open_by_handle_at(r0, &(0x7f0000000100)={0x84, 0x7a1, "efb2bde0e19606b7a2c2ae911c4bd6ad116f7caf5caf5dd92cb6b9f3c8608fbfd7c12d17b7dcc6e9dd51e00a260edd49cbf4ced9b7890c8bd144cca32f0d203baa14b17490158bdc946d9e8ac7eae304863357c14507d85be89ac279019cd7d2c79678b4d6f3377e7f6795aade500560b2d886c95ce9d6c742dee4cf"}, 0x8000) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x89e2, 0x0) 10:19:24 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 598.414141][T29754] overlayfs: './file0' not a directory 10:19:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x5411, 0x0) [ 598.484141][T29765] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 598.495147][T29766] overlayfs: './file0' not a directory 10:19:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4, 0xd1) 10:19:24 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:24 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x161042, 0x0) fchdir(r0) socket$l2tp(0x18, 0x1, 0x1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xd1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="fafffffdffffffff04000000000000000200000058fd0000020000000000000003000000000000000002000000000000001000000000000000000000000000000000000000000000021d000000000000000000000000000021ca0000000000000500000000000000001000000000000000000000000000000000000000000000000100ffff0000000000000000000075"]) 10:19:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/6, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x5421, 0x0) [ 598.635194][T29778] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:24 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:24 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 598.693734][T29781] overlayfs: './file0' not a directory [ 598.732049][T29789] overlayfs: './file0' not a directory 10:19:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x6, 0x2, 0x5f5fe236, 0x9, 0x0, 0x6, 0x1, 0x4000000000000, 0x2, 0x5}, 0xb) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80, 0x12) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 598.747977][T29790] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x5450, 0x0) 10:19:24 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x6, 0xd1) 10:19:24 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x125) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u\tperdir=./file0,lowerdir=./file0,workdir=./file1\\\x00']) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'user.', '.\x00'}, &(0x7f00000000c0)='overlay\x00', 0x8, 0x1) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0xd1) 10:19:24 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:24 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:24 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup2(r1, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000040)={0x1, 0x2, 0x72, 'queue1\x00', 0x3}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x5451, 0x0) [ 598.941400][T29803] overlayfs: unrecognized mount option "u perdir=./file0" or missing value [ 598.972907][T29809] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x5452, 0x0) [ 599.004228][T29814] overlayfs: unrecognized mount option "u perdir=./file0" or missing value 10:19:24 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:24 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x200, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80140) bind$isdn(r0, &(0x7f00000000c0)={0x22, 0x8b77, 0x1, 0x5, 0x3f}, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x89e2, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@null=' \x00', 0xa, 'bpq0\x00'}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0xff, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x36, &(0x7f0000000180)=0x100, 0x4) 10:19:24 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 599.049162][T29819] overlayfs: './file0' not a directory 10:19:25 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x8, 0xd1) 10:19:25 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) getsockopt$netlink(r1, 0x10e, 0xe, &(0x7f0000000240)=""/221, &(0x7f0000000040)=0xdd) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:25 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x5460, 0x0) [ 599.174266][T29833] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$x25(r1, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000080)) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r3 = geteuid() syz_mount_image$erofs(&(0x7f00000000c0)='erofs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x3, &(0x7f0000000740)=[{&(0x7f0000000140)="6d3384b9ed2c6f6cfac0d8baf681176fa1c8a820d08e5e0b20aa7bc328bdae483bfba89c436c6744dbed1348ddc851ba8198141c5ab3a66f108d90163c44b0bc22ab2e33aa9a8da8a002f367a0a16c100cf2", 0x52}, {&(0x7f00000001c0)="f227", 0x2, 0x7776735f}, {&(0x7f0000000400)="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", 0x256, 0x1}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fault_injection=0x00000000000001ff,acl,nouser_xattr,noacl,user_xattr,noacl,dont_hash,obj_role=/dev/sequencer\x00,uid>', @ANYRESDEC=r3, @ANYBLOB="a455"]) 10:19:25 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:25 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:25 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8901, 0x0) [ 599.238215][T29841] overlayfs: './file0' not a directory [ 599.336156][T29850] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 599.346121][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 599.346135][ T26] audit: type=1804 audit(1547720365.231:197): pid=29837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/865/file0/file0" dev="overlay" ino=100459 res=1 [ 599.358747][T29849] overlayfs: './file0' not a directory 10:19:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xb) getsockopt$rose(r3, 0x104, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000080)={0x4ff, 0x3}) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:25 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:25 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) rmdir(&(0x7f0000000300)='./file1\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0xffffffff}, 0x28, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000400)=0x1, 0x4) r2 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)="e27eeb95ef39db917368fd1e46f9f65f99ec8768fc4ab892b4a9e9e32adabd6bdc5cc8404f8f0643aec9ac189bb21b7d3effd094d060c5b2fd8a344e1e740c0c41bb38413f07e545966ead01d9109292550eeeda5a479367d901ad00ca9dc59a20ba0569ea8c0a2be909466f2ccbea456a11ee72e500519ca869e6243244ded3be92c8438c5110dc4e81c803cb643856568cde2b5da89823be834cc12fb86c4fed277fd603acab3bbdc4fd3bc326f8d8bb81852dbe", 0xb5, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) sendfile(r1, r1, 0x0, 0xd1) 10:19:25 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:25 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8902, 0x0) [ 599.498522][ T26] audit: type=1804 audit(1547720365.271:198): pid=29857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/981/file0/file0" dev="overlay" ino=101521 res=1 [ 599.537084][T29867] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:25 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x9, 0xd1) 10:19:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r3, 0x232, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @ipv4={[], [], @remote}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x20, @mcast2, 0x3f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x241d3ebd}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = fcntl$getown(r0, 0x9) ptrace$peek(0x2, r4, &(0x7f0000000040)) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:25 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8903, 0x0) [ 599.607521][T29877] overlayfs: './file0' not a directory 10:19:25 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\xc0', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:25 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 10:19:25 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) [ 599.645417][ T26] audit: type=1800 audit(1547720365.431:199): pid=29857 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor2" name="file0" dev="overlay" ino=101521 res=0 10:19:25 executing program 3: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') [ 599.760752][ T26] audit: type=1804 audit(1547720365.521:200): pid=29872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/866/file0/file0" dev="overlay" ino=100510 res=1 10:19:25 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8904, 0x0) 10:19:25 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:25 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)="fa2ef10ff753c244e2061ab0b9efb9e958aa1f61d9e2b1dd6029edc3a4f6aabb8ef7c37a7c48ff5fe9d9cf131e674403ba3cca055c0bbf4999e599aa087dac496dc59ab102d766f1c30f71097a9bb62e3afde7c1d27dbdb2d9b8ea7600790927efe19d02964b38c964aa9e9e7e85e7430a57861e666598df30f5d3f72bf7adf09a1f737ba8b3e00245126602248ac6773349f6837c2cb750c2ae299678f378daf996b373cd6936c1107bd378ff651349b7767ea0ea4d5220221d26f2e8c832048e4db61c901ee3d274bbe840c114967243e180bef779ebed9b3b48a3c5f64e9126fbf0d2c3c6c928e17f7042308f", 0xee}, {&(0x7f0000000180)="7bbd7d08bb36fab9f4de44", 0xb}, {&(0x7f00000001c0)="7e54f32d064871e6998a1531aec98f087a08cc34583e02102502671b17", 0x1d}], 0x3) ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x685, 0x101000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip_vti0\x00', 0x10) [ 599.818145][ T26] audit: type=1804 audit(1547720365.531:201): pid=29872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/866/file0/file0" dev="overlay" ino=100510 res=1 [ 599.856466][T29902] overlayfs: './file0' not a directory 10:19:25 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) [ 599.870970][T29904] overlayfs: './file0' not a directory [ 599.877981][T29901] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:25 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065756469101c1b5866696c65302c6cb8a411f76469723d2e2f66696c65302c776f7200003372269b8446e7355d210000"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) [ 599.971254][ T26] audit: type=1804 audit(1547720365.751:202): pid=29899 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/867/file0" dev="sda1" ino=16536 res=1 10:19:25 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xc, 0xd1) 10:19:25 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) 10:19:25 executing program 4: pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:25 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 600.030527][T29917] overlayfs: unrecognized mount option "uppeudiXfile0" or missing value [ 600.038179][ T26] audit: type=1804 audit(1547720365.751:203): pid=29899 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/867/file0" dev="sda1" ino=16536 res=1 [ 600.049984][T29918] overlayfs: unrecognized mount option "uppeudiXfile0" or missing value 10:19:26 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) 10:19:26 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8907, 0x0) [ 600.116348][T29925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 600.132115][ T26] audit: type=1804 audit(1547720365.801:204): pid=29897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/982/file0/file0" dev="overlay" ino=101608 res=1 10:19:26 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6fd9f9bb058d5eac372197017765726469723d2e2f66696c65f9a9776f726b6469"]) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) r2 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x9, 0x8800) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r4 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x10000) r5 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3010}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x5b8, 0x37, 0x0, 0x70bd27, 0x25dfdbfc, {0x1c}, [@typed={0xc, 0x29, @str='overlay\x00'}, @typed={0x14, 0x7d, @ipv6=@loopback}, @typed={0x8, 0x63, @fd=r1}, @nested={0x78, 0x14, [@typed={0x8, 0x48, @fd=r2}, @generic="d3f5d1b2a1cbf4d9504739d032082b4eeacad35f0bcd8295198f8d5c2c0a9ecb827363bbfbbd9bedd73e67b465344c9e3dd1429f06c2fb39e5a8285d03937d4927ca0497a3661e9fe7ddf33f45b1fbd64374984108951a4b71", @typed={0x8, 0x61, @fd=r3}, @typed={0x8, 0x84, @fd=r4}]}, @nested={0x128, 0x57, [@typed={0x8, 0x8c, @ipv4=@remote}, @typed={0x4, 0x2b}, @typed={0xcc, 0x21, @binary="ee2ff10992cfd36e6dd5080c3492f4fcd64fa599613cb3abdea9d333e58f51fa5da8f7f7ac167b29d804696393beae20f83a842daf5d24206f2d4b8306abe10885063d561197a997f792b3229f464b82989b3f46fe1ff3e5dd307525a4d62dba4936b693b00ac537d6883d96ec753102b0f2f117e1b0e0621fb55ed13d7bfa2c30c4a829929dde6e64fd92eb1a118b3cc275c2082c0bf529adc0ce3cba05a6dea753802818d93c2ea1722ab6b64158285b9bf3ad51f749e98a30ad35cb080a15a0eb9eec5ae127"}, @generic="f54b0f964f", @generic="47674ba5c7a217ce9bf78ad9d5574622068d361cf00099a05025074f3d4e4fa3b832b2c48a558b28603188ab85f2dde298197e912abe50035e09678a8c8230fc00b8a216b6b28b"]}, @typed={0x4, 0x15}, @nested={0x260, 0x8e, [@typed={0x8, 0x4e, @pid=r5}, @typed={0xc, 0x40, @str='eth0em1\x00'}, @generic="91ca8a61cd22e415f3902d1ec6f479f3b3b303ffb89d26eb6bd37583c4f39a50b10dae757e95b88355eb74dc7363214eea1fc6aeeae2ec14f98ed89f0f5e77883c032ec3af46fa6d13eaf4c72c28ef6a8a994b15ece2fc7b3a64eb950051851dfbf18c4080b6f5b2a99d1e9eccfeab87f3faf34f7544f58bc77bf1b57e98ff9f6816e22280b77be73d53fd56d077bf72514aceb8341ea6b3592cd7636dd8c9cc78dc1a415ceb355f7af39316e977ef0be7e1b46d43a00fa604d00787ffa4a620ed8d87f72e0ad88e884727f630087cb3bb89a8b1a5849ab9d99d613c36678a7b1e8af45b", @generic="3e820c3fd6c7f9f2b8edb43a90c1d4c8bc49a65a3b83f92288053e0250e38b94cf63eda6f141b2f469ab7ffa7b6b5ff1b8836166362bfb876eef8902a9981ad9da964a7c49b6aa83ec4b0fb6a66d2aab33ac2df0de400621cf6fe2594adb9940103468bc232316095990c10a6b19c1", @generic="0b7da8e9cc", @generic="23348b5beb01f060179460baa527b3d7452742d431c0baea7f265c35b873dd8aa4ece56657f5d6eee7315087bc13facb98db8a4c12545a56a2508f42eb884aaf13c090c0602a9bdc07eda59f27dd6fab202f9b6a75c4718d1c66becda0b84734427da81b9497598f8e00b4bdcbacb1358e7925e488ecff81404c1c42409ecbc4d7d0f019f12a615bf06bfd34c0405fd364acfae8773c5f3e1cac8ffbcf4930063c58f3c273995312d5cfba6d0ba4a87ae2209b69621cbe8db4f105fba93d81ecdb7cfa330e75a86b0e4bd49c1626d0c8f3067fad7eeb9fb7367d4a3a8a48ee5c90b16c3dfe7a0326712ecbda82"]}, @generic="a7eb6d748c130873894c66be83fa9a231a23d78efed6d134332a439c63bf21eef122ed2882d66dc3d69a595455f6d9c086bba6d88cb416a65f5c99bf56075dfc5052d6c7526bee64c68641aeff444ffefa5c8bd1468068454a697db7325612e3fa29ad73bddc6400c79cedf72545d9613761b0515f276e0facba32bd7827ac412892f2ed10205fd581447f4dbd6a14c718b0f9dc5f6f2a537e961d9301b2f016938f050ec0a5838e3253d8d5fd8db93beea609e61ed7b653d2329606eadb3012bbaa9b93d2199d23195cce5e132c923602", @generic="42f0a505b5aa210d775df80b958d227fcec74f46cc4b823b2791445abc4f479f1dbc6eacf60d45432d4235a39620724005bbc4a980acb1c4fc0b6cded3f7cef8085c77f6197b8e18b3eda51a1d968e3680b759339b69553f24d1aeabf19abb07015c6db7401f5103d74241e8762c28d083c06044963d9d9fe1257640569b2e700863a05721eaaa57b758d4110866754cafea8573c2f2534a266d44351885859874ad3d7b94"]}, 0x5b8}, 0x1, 0x0, 0x0, 0x4000}, 0x48014) sendto$inet(r2, &(0x7f0000000380)="e2e70e4707d2cc3c60b736ada3a2fd0b31bac5cca40dd9091b4b6104d6235065385b828a7bd8f300b36d38d96b89107eab9064d2b990ff37bf3110738f64c5302a2ca92c24ce1a9a0bc4", 0x4a, 0x4050, &(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x800, 0x509000) fchdir(r6) r7 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r7, r7, 0x0, 0xd1) [ 600.174947][ T26] audit: type=1804 audit(1547720365.801:205): pid=29897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/982/file0/file0" dev="overlay" ino=101608 res=1 10:19:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000080)="00000000000000000000002e905b7cc55af87b8425076169af5ed416e69f23008763b127ad0266398c8eefa4f9b9702fa4ebd18df5479a99a8a7cae6701a95000800009df7f9c9decd3bdc108f982cee82537a") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x101, 0x40) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) 10:19:26 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 600.201754][ T26] audit: type=1804 audit(1547720365.981:206): pid=29917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir514072162/syzkaller.aPrfcP/868/file0/file0" dev="sda1" ino=16572 res=1 [ 600.243954][T29929] overlayfs: './file0' not a directory [ 600.283747][T29936] overlayfs: unrecognized mount option "loÙù»^¬7!—werdir=./fileù©workdi" or missing value 10:19:26 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) rmdir(&(0x7f0000000300)='./file1\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'L+', 0xffffffff}, 0x28, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000400)=0x1, 0x4) r2 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000240)="e27eeb95ef39db917368fd1e46f9f65f99ec8768fc4ab892b4a9e9e32adabd6bdc5cc8404f8f0643aec9ac189bb21b7d3effd094d060c5b2fd8a344e1e740c0c41bb38413f07e545966ead01d9109292550eeeda5a479367d901ad00ca9dc59a20ba0569ea8c0a2be909466f2ccbea456a11ee72e500519ca869e6243244ded3be92c8438c5110dc4e81c803cb643856568cde2b5da89823be834cc12fb86c4fed277fd603acab3bbdc4fd3bc326f8d8bb81852dbe", 0xb5, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r2) sendfile(r1, r1, 0x0, 0xd1) 10:19:26 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x890b, 0x0) 10:19:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xd, 0xd1) [ 600.329014][T29944] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 600.365398][T29946] overlayfs: unrecognized mount option "loÙù»^¬7!—werdir=./fileù©workdi" or missing value 10:19:26 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) connect$ax25(r0, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:26 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:26 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 10:19:26 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x890c, 0x0) [ 600.482620][T29956] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 600.519017][T29960] overlayfs: './file0' not a directory 10:19:26 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:26 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4, 0xd1) 10:19:26 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x3, @name="819618c99cac2822687e70066c65f499a2b2714839f2a113a4348a5adb4bc69e"}, 0x8, 0x0, 0x5}) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xd1) 10:19:26 executing program 4 (fault-call:6 fault-nth:0): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 600.565521][T29966] overlayfs: './file0' not a directory 10:19:26 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8915, 0x0) [ 600.621159][T29969] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xf, 0xd1) 10:19:26 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x891e, 0x0) [ 600.701156][T29979] overlayfs: './file0' not a directory 10:19:26 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:26 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:26 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x400000000000) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000240)) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, [0x20, 0x3, 0x4, 0x9]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000300)=0xc) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65310300"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffff9c, 0x9) sendfile(r2, r2, 0x0, 0xd1) 10:19:26 executing program 5 (fault-call:1 fault-nth:0): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 600.833518][T29988] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 600.867453][T29992] overlayfs: './file0' not a directory 10:19:26 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8940, 0x0) 10:19:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x10, 0xd1) 10:19:26 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 600.940210][T29997] overlayfs: failed to resolve './file1': -2 [ 600.972276][T30001] FAULT_INJECTION: forcing a failure. [ 600.972276][T30001] name failslab, interval 1, probability 0, space 0, times 0 10:19:26 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0xeffd) [ 600.989141][T30002] overlayfs: './file0' not a directory [ 601.005838][T30001] CPU: 1 PID: 30001 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 601.014881][T30001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.024932][T30001] Call Trace: [ 601.028236][T30001] dump_stack+0x1db/0x2d0 [ 601.032579][T30001] ? dump_stack_print_info.cold+0x20/0x20 10:19:26 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8941, 0x0) [ 601.038301][T30001] ? proc_fail_nth_write+0xa0/0x220 [ 601.043519][T30001] should_fail.cold+0xa/0x14 [ 601.048114][T30001] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 601.053916][T30001] ? ___might_sleep+0x1e7/0x310 [ 601.058747][T30001] ? arch_local_save_flags+0x50/0x50 [ 601.064016][T30001] __should_failslab+0x121/0x190 [ 601.068935][T30001] should_failslab+0x9/0x14 [ 601.073416][T30001] __kmalloc_track_caller+0x2d8/0x740 [ 601.078773][T30001] ? strncpy_from_user+0x4e0/0x4e0 [ 601.083870][T30001] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 601.090089][T30001] ? strndup_user+0x77/0xd0 [ 601.094570][T30001] memdup_user+0x26/0xb0 [ 601.098799][T30001] strndup_user+0x77/0xd0 [ 601.103108][T30001] ksys_mount+0x3c/0x150 [ 601.107334][T30001] __x64_sys_mount+0xbe/0x150 [ 601.111992][T30001] do_syscall_64+0x1a3/0x800 [ 601.116571][T30001] ? syscall_return_slowpath+0x5f0/0x5f0 [ 601.122203][T30001] ? prepare_exit_to_usermode+0x232/0x3b0 [ 601.127903][T30001] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.133429][T30001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 601.139309][T30001] RIP: 0033:0x458099 [ 601.143191][T30001] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.162774][T30001] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.171207][T30001] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 601.179156][T30001] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:27 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', 'overlay\x00'}, &(0x7f0000000240)=""/119, 0x77) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0xd1) [ 601.187123][T30001] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 601.195092][T30001] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 601.203050][T30001] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 601.225970][T30005] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:27 executing program 5 (fault-call:1 fault-nth:1): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:27 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x894c, 0x0) [ 601.313003][T30016] overlayfs: './file0' not a directory [ 601.328693][T30018] overlayfs: './file0' not a directory [ 601.345121][T30021] FAULT_INJECTION: forcing a failure. [ 601.345121][T30021] name failslab, interval 1, probability 0, space 0, times 0 [ 601.352921][T30010] overlayfs: './file0' not a directory 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 601.402659][T30028] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.423335][T30021] CPU: 0 PID: 30021 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 601.432377][T30021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.442432][T30021] Call Trace: [ 601.445734][T30021] dump_stack+0x1db/0x2d0 [ 601.450075][T30021] ? dump_stack_print_info.cold+0x20/0x20 [ 601.455800][T30021] ? proc_fail_nth_write+0xa0/0x220 [ 601.456811][T30033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.460997][T30021] ? add_lock_to_list.isra.0+0x450/0x450 [ 601.461023][T30021] should_fail.cold+0xa/0x14 [ 601.461044][T30021] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 601.485242][T30021] ? ___might_sleep+0x1e7/0x310 [ 601.490096][T30021] ? arch_local_save_flags+0x50/0x50 [ 601.495390][T30021] ? lock_downgrade+0xbe0/0xbe0 [ 601.500029][T30035] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.500244][T30021] ? lock_release+0xc40/0xc40 [ 601.513129][T30021] __should_failslab+0x121/0x190 [ 601.518090][T30021] should_failslab+0x9/0x14 [ 601.522595][T30021] __kmalloc_track_caller+0x2d8/0x740 [ 601.527971][T30021] ? strncpy_from_user+0x4e0/0x4e0 [ 601.533080][T30021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 601.539321][T30021] ? strndup_user+0x77/0xd0 [ 601.539727][T30037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.543825][T30021] memdup_user+0x26/0xb0 [ 601.543844][T30021] strndup_user+0x77/0xd0 [ 601.543866][T30021] ksys_mount+0x7b/0x150 [ 601.564857][T30021] __x64_sys_mount+0xbe/0x150 [ 601.569532][T30021] do_syscall_64+0x1a3/0x800 [ 601.574121][T30021] ? syscall_return_slowpath+0x5f0/0x5f0 [ 601.579775][T30021] ? prepare_exit_to_usermode+0x232/0x3b0 [ 601.585501][T30021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 601.591064][T30021] entry_SYSCALL_64_after_hwframe+0x49/0xbe 10:19:27 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./fple1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0xffff}) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r2, &(0x7f0000000040)) sendfile(r1, r1, 0x0, 0xd1) 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:27 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x12, 0xd1) 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 601.594122][T30039] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.596956][T30021] RIP: 0033:0x458099 [ 601.596971][T30021] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 601.596980][T30021] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.596995][T30021] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 601.597003][T30021] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:27 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:27 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8980, 0x0) [ 601.597017][T30021] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 601.660979][T30021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 601.668931][T30021] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:27 executing program 5 (fault-call:1 fault-nth:2): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:27 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8981, 0x0) [ 601.745990][T30042] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.809597][T30051] overlayfs: failed to resolve './fple1': -2 [ 601.825890][T30056] overlayfs: './file0' not a directory [ 601.838533][T30058] FAULT_INJECTION: forcing a failure. [ 601.838533][T30058] name failslab, interval 1, probability 0, space 0, times 0 [ 601.849384][T30059] overlayfs: './file0' not a directory 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 601.857601][T30060] overlayfs: './file0' not a directory [ 601.889630][T30058] CPU: 1 PID: 30058 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 601.897825][T30062] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 601.898673][T30058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.916938][T30058] Call Trace: [ 601.920235][T30058] dump_stack+0x1db/0x2d0 [ 601.924569][T30058] ? dump_stack_print_info.cold+0x20/0x20 [ 601.930292][T30058] ? add_lock_to_list.isra.0+0x450/0x450 [ 601.935936][T30058] should_fail.cold+0xa/0x14 [ 601.940539][T30058] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 601.946355][T30058] ? ___might_sleep+0x1e7/0x310 [ 601.951208][T30058] ? arch_local_save_flags+0x50/0x50 [ 601.956504][T30058] ? lock_downgrade+0xbe0/0xbe0 [ 601.961358][T30058] ? __check_object_size+0xa3/0x790 [ 601.966567][T30058] __should_failslab+0x121/0x190 [ 601.971509][T30058] should_failslab+0x9/0x14 [ 601.976017][T30058] kmem_cache_alloc_trace+0x2d1/0x760 [ 601.981397][T30058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 10:19:27 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0xfffffffffffffffc, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x9) fchdir(r0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000200), 0x1) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) seccomp(0x1, 0x1, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x3ff, 0x8, 0x7fffffff, 0x660}, {0x5, 0x800, 0x7, 0x7}, {0x8001, 0x5, 0x7f, 0x100}, {0x71c0, 0x28, 0x200, 0x2}, {0x8, 0x7, 0x8, 0x70}, {0x7, 0xffffffff, 0x38e535e0, 0x6}, {0x6, 0x9, 0x9, 0x200}, {0x3, 0x80, 0xa6f4, 0x7fffffff}, {0x100000000, 0x7, 0x3, 0x9}, {0x5, 0x40, 0x1, 0x1}]}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0xa4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000380)=0x84) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) tee(r3, r0, 0x7, 0x0) 10:19:27 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8982, 0x0) 10:19:27 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:27 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0xeffdffff) 10:19:27 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x15, 0xd1) [ 601.987655][T30058] ? _copy_from_user+0xdd/0x150 [ 601.988730][T30067] overlayfs: missing 'lowerdir' [ 601.992514][T30058] copy_mount_options+0x5c/0x440 [ 601.992533][T30058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 601.992554][T30058] ksys_mount+0xa7/0x150 [ 601.992578][T30058] __x64_sys_mount+0xbe/0x150 [ 602.001320][T30068] overlayfs: missing 'lowerdir' [ 602.002885][T30058] do_syscall_64+0x1a3/0x800 [ 602.002906][T30058] ? syscall_return_slowpath+0x5f0/0x5f0 [ 602.002925][T30058] ? prepare_exit_to_usermode+0x232/0x3b0 [ 602.002950][T30058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.034182][T30070] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 602.038764][T30058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.038777][T30058] RIP: 0033:0x458099 [ 602.038793][T30058] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.038801][T30058] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:19:27 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r1, r1, 0x0, 0xd5) 10:19:28 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x8983, 0x0) [ 602.038816][T30058] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 602.038825][T30058] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 602.038833][T30058] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 602.038841][T30058] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 602.038850][T30058] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 602.095966][T30074] overlayfs: './file0' not a directory 10:19:28 executing program 5 (fault-call:1 fault-nth:3): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:28 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:28 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd1) 10:19:28 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89a0, 0x0) [ 602.245276][T30083] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:28 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:28 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89a1, 0x0) [ 602.289128][T30088] FAULT_INJECTION: forcing a failure. [ 602.289128][T30088] name failslab, interval 1, probability 0, space 0, times 0 [ 602.296448][T30090] overlayfs: './file0' not a directory [ 602.317096][T30094] overlayfs: './file0' not a directory 10:19:28 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0xfffffdef) [ 602.374695][T30088] CPU: 0 PID: 30088 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 602.383755][T30088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.393806][T30088] Call Trace: [ 602.397099][T30088] dump_stack+0x1db/0x2d0 [ 602.401415][T30088] ? dump_stack_print_info.cold+0x20/0x20 [ 602.407122][T30088] ? add_lock_to_list.isra.0+0x450/0x450 [ 602.412736][T30088] ? cache_grow_end+0xa4/0x190 [ 602.417492][T30088] should_fail.cold+0xa/0x14 [ 602.422076][T30088] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 602.427877][T30088] ? ___might_sleep+0x1e7/0x310 [ 602.432710][T30088] ? arch_local_save_flags+0x50/0x50 [ 602.437978][T30088] ? lock_downgrade+0xbe0/0xbe0 [ 602.442813][T30088] ? __check_object_size+0xa3/0x790 [ 602.447998][T30088] __should_failslab+0x121/0x190 [ 602.452919][T30088] should_failslab+0x9/0x14 [ 602.457408][T30088] kmem_cache_alloc_trace+0x2d1/0x760 [ 602.462762][T30088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 602.468987][T30088] ? _copy_from_user+0xdd/0x150 [ 602.473827][T30088] copy_mount_options+0x5c/0x440 [ 602.478747][T30088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 602.484971][T30088] ksys_mount+0xa7/0x150 [ 602.489197][T30088] __x64_sys_mount+0xbe/0x150 [ 602.493864][T30088] do_syscall_64+0x1a3/0x800 [ 602.498439][T30088] ? syscall_return_slowpath+0x5f0/0x5f0 [ 602.504053][T30088] ? prepare_exit_to_usermode+0x232/0x3b0 [ 602.509769][T30088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 602.515306][T30088] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 602.521174][T30088] RIP: 0033:0x458099 [ 602.525053][T30088] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 602.544651][T30088] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 602.553046][T30088] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 602.561013][T30088] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:28 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x18, 0xd1) 10:19:28 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 602.568963][T30088] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 602.576915][T30088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 602.584867][T30088] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 602.603374][T30100] overlayfs: filesystem on './file0' not supported as upperdir 10:19:28 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x89e2, 0x0) 10:19:28 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f0000000040)='./file1\x00', 0x200) sendfile(r1, r1, 0x0, 0xd1) 10:19:28 executing program 5 (fault-call:1 fault-nth:4): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 602.709102][T30106] overlayfs: './file0' not a directory [ 602.726327][T30110] overlayfs: './file0' not a directory [ 602.737120][T30109] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:28 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1b, 0xd1) 10:19:28 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x7ffffffff000) [ 602.820603][T30121] FAULT_INJECTION: forcing a failure. [ 602.820603][T30121] name failslab, interval 1, probability 0, space 0, times 0 [ 602.840307][T30123] overlayfs: './file0' not a directory [ 602.849710][T30121] CPU: 1 PID: 30121 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 602.858732][T30121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.868772][T30121] Call Trace: [ 602.872064][T30121] dump_stack+0x1db/0x2d0 [ 602.876385][T30121] ? dump_stack_print_info.cold+0x20/0x20 [ 602.882089][T30121] ? kernel_text_address+0x73/0xf0 [ 602.887180][T30121] ? __kernel_text_address+0xd/0x40 [ 602.892367][T30121] should_fail.cold+0xa/0x14 [ 602.896942][T30121] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 602.902736][T30121] ? ___might_sleep+0x1e7/0x310 [ 602.907572][T30121] ? arch_local_save_flags+0x50/0x50 [ 602.912840][T30121] ? copy_mount_options+0x5c/0x440 [ 602.917934][T30121] ? ksys_mount+0xa7/0x150 [ 602.922336][T30121] ? __x64_sys_mount+0xbe/0x150 [ 602.927177][T30121] __should_failslab+0x121/0x190 [ 602.932101][T30121] should_failslab+0x9/0x14 [ 602.936590][T30121] kmem_cache_alloc+0x2be/0x710 [ 602.941421][T30121] ? cache_grow_end+0xa4/0x190 [ 602.946165][T30121] ? lock_acquire+0x1db/0x570 [ 602.950823][T30121] getname_flags+0xd6/0x5b0 [ 602.955310][T30121] user_path_at_empty+0x2f/0x50 [ 602.960143][T30121] do_mount+0x168/0x2fa0 [ 602.964377][T30121] ? copy_mount_string+0x40/0x40 [ 602.969308][T30121] ? rcu_read_lock_sched_held+0x110/0x130 [ 602.975011][T30121] ? kmem_cache_alloc_trace+0x354/0x760 [ 602.980561][T30121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 602.986783][T30121] ? copy_mount_options+0x30e/0x440 [ 602.991969][T30121] ksys_mount+0xdb/0x150 [ 602.996195][T30121] __x64_sys_mount+0xbe/0x150 [ 603.000862][T30121] do_syscall_64+0x1a3/0x800 [ 603.005435][T30121] ? syscall_return_slowpath+0x5f0/0x5f0 [ 603.011052][T30121] ? prepare_exit_to_usermode+0x232/0x3b0 [ 603.016755][T30121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 603.022287][T30121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.028162][T30121] RIP: 0033:0x458099 [ 603.032044][T30121] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 603.051626][T30121] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 603.060023][T30121] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:28 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x40049409, 0x0) 10:19:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,we1\\\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd3) [ 603.067975][T30121] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 603.075926][T30121] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 603.083877][T30121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 603.091844][T30121] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:29 executing program 5 (fault-call:1 fault-nth:5): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 603.179093][T30128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.209043][T30136] overlayfs: unrecognized mount option "we1\" or missing value [ 603.220540][T30137] overlayfs: './file0' not a directory 10:19:29 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 603.249780][T30140] overlayfs: unrecognized mount option "we1\" or missing value [ 603.261892][T30141] overlayfs: './file0' not a directory 10:19:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x4020940d, 0x0) 10:19:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) set_tid_address(&(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:29 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0xf0ffffff7f0000) [ 603.300442][T30142] FAULT_INJECTION: forcing a failure. [ 603.300442][T30142] name failslab, interval 1, probability 0, space 0, times 0 [ 603.341679][T30145] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.350323][T30142] CPU: 0 PID: 30142 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 603.359354][T30142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.369405][T30142] Call Trace: [ 603.372703][T30142] dump_stack+0x1db/0x2d0 [ 603.377047][T30142] ? dump_stack_print_info.cold+0x20/0x20 [ 603.382783][T30142] should_fail.cold+0xa/0x14 [ 603.387383][T30142] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 603.393206][T30142] ? ___might_sleep+0x1e7/0x310 [ 603.398072][T30142] ? arch_local_save_flags+0x50/0x50 [ 603.399110][T30151] overlayfs: './file0' not a directory [ 603.403364][T30142] __should_failslab+0x121/0x190 [ 603.403385][T30142] should_failslab+0x9/0x14 [ 603.403406][T30142] kmem_cache_alloc_trace+0x2d1/0x760 [ 603.423623][T30142] alloc_fs_context+0x5a/0x640 [ 603.428393][T30142] fs_context_for_mount+0x25/0x30 [ 603.433421][T30142] do_mount+0x15bb/0x2fa0 [ 603.437769][T30142] ? copy_mount_string+0x40/0x40 [ 603.442716][T30142] ? kmem_cache_alloc_trace+0x354/0x760 [ 603.448268][T30142] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 603.454508][T30142] ? _copy_from_user+0xdd/0x150 [ 603.459366][T30142] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.465608][T30142] ? copy_mount_options+0x30e/0x440 [ 603.469540][T30153] overlayfs: './file0' not a directory [ 603.470815][T30142] ksys_mount+0xdb/0x150 [ 603.470835][T30142] __x64_sys_mount+0xbe/0x150 [ 603.485188][T30142] do_syscall_64+0x1a3/0x800 [ 603.489784][T30142] ? syscall_return_slowpath+0x5f0/0x5f0 [ 603.495418][T30142] ? prepare_exit_to_usermode+0x232/0x3b0 [ 603.495439][T30142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 603.495465][T30142] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.506682][T30142] RIP: 0033:0x458099 [ 603.506697][T30142] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:19:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x6}}, 0x20) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f6c65302c776f726b6469723d2e2f66696c65315c009fd07e43609f8031480a1562bf83c48f0000001000000000000000"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x40, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, 0x0, 0xd1) 10:19:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0xc0045878, 0x0) 10:19:29 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1e, 0xd1) 10:19:29 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:29 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0xeffdffffffffffff) [ 603.506704][T30142] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 603.506719][T30142] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 603.506727][T30142] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 603.506740][T30142] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 603.553960][T30160] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.560409][T30142] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 10:19:29 executing program 5 (fault-call:1 fault-nth:6): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0xc0045878, 0x0) [ 603.560419][T30142] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:29 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 603.696165][T30170] overlayfs: unrecognized mount option "lole0" or missing value [ 603.711281][T30176] overlayfs: './file0' not a directory [ 603.719539][T30175] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0xc0189436, 0x0) 10:19:29 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 603.741477][T30177] overlayfs: './file0' not a directory [ 603.753177][T30178] overlayfs: unrecognized mount option "lole0" or missing value [ 603.772204][T30181] FAULT_INJECTION: forcing a failure. [ 603.772204][T30181] name failslab, interval 1, probability 0, space 0, times 0 [ 603.819326][T30181] CPU: 1 PID: 30181 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 603.828377][T30181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 603.838638][T30181] Call Trace: [ 603.841938][T30181] dump_stack+0x1db/0x2d0 [ 603.846287][T30181] ? dump_stack_print_info.cold+0x20/0x20 [ 603.852008][T30181] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 603.858080][T30181] ? rcu_pm_notify+0xd0/0xd0 [ 603.862679][T30181] should_fail.cold+0xa/0x14 [ 603.867276][T30181] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 603.873088][T30181] ? ___might_sleep+0x1e7/0x310 [ 603.877941][T30181] ? arch_local_save_flags+0x50/0x50 [ 603.883231][T30181] ? alloc_fs_context+0x5a/0x640 [ 603.888177][T30181] __should_failslab+0x121/0x190 [ 603.893118][T30181] should_failslab+0x9/0x14 [ 603.897622][T30181] kmem_cache_alloc_trace+0x2d1/0x760 [ 603.903000][T30181] ? rcu_read_lock_sched_held+0x110/0x130 [ 603.908720][T30181] ? kmem_cache_alloc_trace+0x354/0x760 [ 603.914280][T30181] legacy_init_fs_context+0x48/0xe0 10:19:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0xc020660b, 0x0) 10:19:29 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x21, 0xd1) [ 603.919484][T30181] ? generic_parse_monolithic+0x240/0x240 [ 603.925205][T30181] alloc_fs_context+0x365/0x640 [ 603.930066][T30181] fs_context_for_mount+0x25/0x30 [ 603.935095][T30181] do_mount+0x15bb/0x2fa0 [ 603.939433][T30181] ? copy_mount_string+0x40/0x40 [ 603.944379][T30181] ? kmem_cache_alloc_trace+0x354/0x760 [ 603.946535][T30187] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.949923][T30181] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 603.949949][T30181] ? _copy_from_user+0xdd/0x150 [ 603.949970][T30181] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 603.975474][T30181] ? copy_mount_options+0x30e/0x440 [ 603.980681][T30181] ksys_mount+0xdb/0x150 [ 603.984929][T30181] __x64_sys_mount+0xbe/0x150 [ 603.989628][T30181] do_syscall_64+0x1a3/0x800 [ 603.994222][T30181] ? syscall_return_slowpath+0x5f0/0x5f0 [ 604.000320][T30181] ? prepare_exit_to_usermode+0x232/0x3b0 [ 604.006033][T30181] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 604.011568][T30181] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 604.017435][T30181] RIP: 0033:0x458099 [ 604.021309][T30181] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 604.040887][T30181] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 604.049271][T30181] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 604.057217][T30181] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:29 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f725e6469723d2e2f66696c65315c00d1804c54d7f1c3246e9d07e54caed2e0b517a71ce8d4d0f400dd2ccc10c164153db664eb573e898eaf4dfc2df6cc77fd09c0a94f867557bb60334c460febd766fbcab2e984667a1372bb033873dee56d91e4a7e767101ffca4a51ce58543708d55b661fcee18197a9f6efd8b3113fcb9f0ee89d0e2c21d599195e7551955dc0e5cabed3f8e10b1d3721f53645a9c4088b595b7d9375dc115e77f5bf86c5abde140cefae4a2904975588d198762b38a3de5ae58cffe453e5c69a69cb2efe78b25d31e39129aa3ecddbca815bc010735163a25a9d8e09a80d0f47faa443e515a857abc8c680b74ce24bab994aa1044d0e50458c8e771b5eecebe004808630ef808"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x7c, 0x1, 0xfffffffffffffff7, "20185807eb9d0d47ca2e2922aad05940", "87ddc797d0421c50c59bd6888714b58b84a2d739138a3131ddcab0341cf8f9da2c77f217f0b52db6ee030355d8b4404fdc9a2048c7b0d97e12b1b583d17b7a098210f85ea0ed92338c1264b949a55cec6a5c25704d2b0496773a7f364eef7676a4ecd351244d77"}, 0x7c, 0x2) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file1\x00', 0x8, 0x2) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0xfffffffffffffffc) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) 10:19:29 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 10:19:29 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0xfffffffffffffdef) [ 604.065167][T30181] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 604.073112][T30181] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 604.081070][T30181] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:30 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 604.112185][T30191] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 604.147446][T30193] overlayfs: unrecognized mount option "wor^dir=./file1\" or missing value 10:19:30 executing program 5 (fault-call:1 fault-nth:7): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:30 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000040)={'gre0\x00', {0x2, 0x4e22, @multicast2}}) [ 604.199836][T30200] overlayfs: unrecognized mount option "wor^dir=./file1\" or missing value 10:19:30 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000040)=""/12, &(0x7f0000000080)=0xc) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x5, 0x300) semget(0x2, 0x2, 0x20) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:30 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="75707065c01706123d72b866696c65302c6c6f776572dca6dd6e70e274246469723d2e2f66696c65302c776f720200000000000000696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) [ 604.240661][T30207] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 604.250078][T30209] overlayfs: './file0' not a directory [ 604.270090][T30211] overlayfs: './file0' not a directory 10:19:30 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:30 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x800, 0x800) ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {r1, 0x8200}], 0x2, &(0x7f0000000140)={0x77359400}, &(0x7f0000000240)={0x6}, 0x8) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r3, r3, 0x0, 0xd1) [ 604.323325][T30214] FAULT_INJECTION: forcing a failure. [ 604.323325][T30214] name failslab, interval 1, probability 0, space 0, times 0 [ 604.354689][T30214] CPU: 0 PID: 30214 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 604.364101][T30214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 604.374146][T30214] Call Trace: [ 604.377434][T30214] dump_stack+0x1db/0x2d0 [ 604.377456][T30214] ? dump_stack_print_info.cold+0x20/0x20 [ 604.377472][T30214] ? save_stack+0x45/0xd0 [ 604.377490][T30214] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 604.397631][T30214] ? kasan_kmalloc+0x9/0x10 [ 604.402133][T30214] ? legacy_init_fs_context+0x48/0xe0 [ 604.407513][T30214] should_fail.cold+0xa/0x14 [ 604.412118][T30214] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 604.417029][T30220] overlayfs: unrecognized mount option "uppeÀ=r¸file0" or missing value [ 604.417966][T30214] ? ___might_sleep+0x1e7/0x310 [ 604.431372][T30214] ? arch_local_save_flags+0x50/0x50 [ 604.436663][T30214] ? check_preemption_disabled+0x48/0x290 [ 604.438277][T30222] overlayfs: unrecognized mount option "uppeÀ=r¸file0" or missing value [ 604.442385][T30214] __should_failslab+0x121/0x190 [ 604.442423][T30214] should_failslab+0x9/0x14 [ 604.442437][T30214] __kmalloc_track_caller+0x2d8/0x740 [ 604.442459][T30214] ? legacy_init_fs_context+0x48/0xe0 [ 604.471143][T30214] ? vfs_parse_fs_string+0x226/0x2b0 [ 604.476424][T30214] kmemdup_nul+0x31/0xa0 [ 604.480668][T30214] vfs_parse_fs_string+0x226/0x2b0 [ 604.482822][T30225] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 604.485800][T30214] ? vfs_parse_fs_param+0x4b0/0x4b0 [ 604.485824][T30214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.485841][T30214] ? alloc_fs_context+0x3bb/0x640 [ 604.485864][T30214] do_mount+0x710/0x2fa0 [ 604.485887][T30214] ? copy_mount_string+0x40/0x40 [ 604.499287][T30214] ? kmem_cache_alloc_trace+0x354/0x760 [ 604.514740][T30214] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 604.514754][T30214] ? _copy_from_user+0xdd/0x150 [ 604.514772][T30214] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 604.541627][T30227] overlayfs: failed to resolve './filÒ0': -2 [ 604.542477][T30214] ? copy_mount_options+0x30e/0x440 [ 604.542500][T30214] ksys_mount+0xdb/0x150 [ 604.542519][T30214] __x64_sys_mount+0xbe/0x150 [ 604.542540][T30214] do_syscall_64+0x1a3/0x800 [ 604.567151][T30214] ? syscall_return_slowpath+0x5f0/0x5f0 [ 604.572789][T30214] ? prepare_exit_to_usermode+0x232/0x3b0 [ 604.578288][T30229] overlayfs: './file0' not a directory [ 604.578512][T30214] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 604.589497][T30214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 604.595394][T30214] RIP: 0033:0x458099 [ 604.599289][T30214] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:19:30 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x24, 0xd1) 10:19:30 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696cd2302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:30 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\xff', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:30 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00e893e1d276b2774eeb95f23d88ae3e0a3cfe9635debf1a530809f377bf81d5dde78c9feb61f810f41b86b21f76026f8e8ec4a1a113be6d953772751d942bec587ed4e045866354135336b446a8b650c161066ad35969f10b4b8c627ce9e9a51d"]) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x800, 0x0) recvfrom$unix(r0, &(0x7f0000000240)=""/145, 0x91, 0x40000020, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 10:19:30 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 604.618896][T30214] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 604.627310][T30214] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 604.635282][T30214] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 604.643255][T30214] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 604.643265][T30214] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 604.643274][T30214] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 604.645438][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 604.645451][ T26] audit: type=1804 audit(1547720370.241:261): pid=30220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1114/file0/file0" dev="sda1" ino=16567 res=1 [ 604.702551][ T26] audit: type=1804 audit(1547720370.241:262): pid=30220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1114/file0/file0" dev="sda1" ino=16567 res=1 10:19:30 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0ac81f1c3784ffb56f9bfe") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 604.755744][T30238] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 604.772168][T30241] overlayfs: './file0' not a directory [ 604.794837][T30242] overlayfs: './file0' not a directory [ 604.800893][ T26] audit: type=1804 audit(1547720370.241:263): pid=30227 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1115/file0/file0" dev="sda1" ino=16558 res=1 10:19:30 executing program 5 (fault-call:1 fault-nth:8): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:30 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0xfffffffffffffe0c) 10:19:30 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\xff', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:30 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x27, 0xd1) [ 604.840840][ T26] audit: type=1804 audit(1547720370.241:264): pid=30227 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1115/file0/file0" dev="sda1" ino=16558 res=1 10:19:30 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x224, 0x800) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x8}, 0x2) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x200, 0x400}) [ 604.882383][ T26] audit: type=1804 audit(1547720370.671:265): pid=30239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1116/file0/file0" dev="overlay" ino=102092 res=1 [ 604.933479][T30249] FAULT_INJECTION: forcing a failure. [ 604.933479][T30249] name failslab, interval 1, probability 0, space 0, times 0 [ 604.963114][T30257] overlayfs: './file0' not a directory [ 604.985932][T30261] overlayfs: './file0' not a directory [ 604.997954][ T26] audit: type=1804 audit(1547720370.671:266): pid=30239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1116/file0/file0" dev="overlay" ino=102092 res=1 [ 605.066043][ T26] audit: type=1804 audit(1547720370.681:267): pid=30236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/993/file0/file0" dev="overlay" ino=102090 res=1 [ 605.074294][T30249] CPU: 1 PID: 30249 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 605.098880][ T26] audit: type=1804 audit(1547720370.681:268): pid=30236 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/993/file0/file0" dev="overlay" ino=102090 res=1 [ 605.100531][T30249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.100537][T30249] Call Trace: [ 605.100560][T30249] dump_stack+0x1db/0x2d0 [ 605.100581][T30249] ? dump_stack_print_info.cold+0x20/0x20 [ 605.126748][ T26] audit: type=1804 audit(1547720370.881:269): pid=30252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1117/file0/file0" dev="overlay" ino=102129 res=1 [ 605.135525][T30249] should_fail.cold+0xa/0x14 [ 605.135545][T30249] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 605.135565][T30249] ? ___might_sleep+0x1e7/0x310 [ 605.135583][T30249] ? arch_local_save_flags+0x50/0x50 [ 605.139231][ T26] audit: type=1804 audit(1547720370.911:270): pid=30257 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1117/file0/file0" dev="overlay" ino=102129 res=1 [ 605.143171][T30249] ? refcount_sub_and_test_checked+0x1f4/0x2e0 [ 605.143196][T30249] __should_failslab+0x121/0x190 [ 605.197815][T30224] overlayfs: './file0' not a directory [ 605.219755][T30249] should_failslab+0x9/0x14 [ 605.219773][T30249] kmem_cache_alloc_trace+0x2d1/0x760 [ 605.219786][T30249] ? sget_userns+0x14d/0x6c0 [ 605.219801][T30249] ? find_held_lock+0x35/0x120 [ 605.219817][T30249] alloc_super+0xca/0xa10 [ 605.219843][T30249] ? destroy_unused_super.part.0+0x110/0x110 [ 605.219857][T30249] ? kasan_check_read+0x11/0x20 [ 605.219882][T30249] ? do_raw_spin_unlock+0xa0/0x330 [ 605.275649][T30249] ? do_raw_spin_trylock+0x270/0x270 [ 605.280914][T30249] sget_userns+0x164/0x6c0 [ 605.285318][T30249] ? get_anon_bdev+0xc0/0xc0 [ 605.289886][T30249] ? vfs_get_super+0x260/0x260 [ 605.294635][T30249] ? security_capable+0x9b/0xd0 [ 605.299465][T30249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.305713][T30249] ? ns_capable_common+0x93/0x100 [ 605.310718][T30249] ? get_anon_bdev+0xc0/0xc0 [ 605.315285][T30249] sget+0x10c/0x150 [ 605.319088][T30249] ? ovl_show_options+0x550/0x550 [ 605.324086][T30249] mount_nodev+0x31/0x110 [ 605.328395][T30249] ovl_mount+0x2d/0x40 [ 605.332442][T30249] ? ovl_own_xattr_set+0x10/0x10 [ 605.337375][T30249] legacy_get_tree+0xf2/0x200 [ 605.342044][T30249] vfs_get_tree+0x123/0x450 [ 605.346541][T30249] do_mount+0x1622/0x2fa0 [ 605.350857][T30249] ? copy_mount_string+0x40/0x40 [ 605.355775][T30249] ? kmem_cache_alloc_trace+0x354/0x760 [ 605.361303][T30249] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 605.367519][T30249] ? _copy_from_user+0xdd/0x150 [ 605.372354][T30249] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.378575][T30249] ? copy_mount_options+0x30e/0x440 [ 605.383752][T30249] ksys_mount+0xdb/0x150 [ 605.387977][T30249] __x64_sys_mount+0xbe/0x150 [ 605.392632][T30249] do_syscall_64+0x1a3/0x800 [ 605.397314][T30249] ? syscall_return_slowpath+0x5f0/0x5f0 [ 605.402937][T30249] ? prepare_exit_to_usermode+0x232/0x3b0 [ 605.408633][T30249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 605.414162][T30249] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.420030][T30249] RIP: 0033:0x458099 [ 605.423903][T30249] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.443571][T30249] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 605.451958][T30249] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 605.459906][T30249] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:31 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x1}) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) close(r1) 10:19:31 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\xff', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:31 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1, r2, r3}, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x325040, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x4) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:31 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2a, 0xd1) 10:19:31 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469ac710b2690956de9302c776f526b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 605.467854][T30249] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 605.475809][T30249] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 605.483774][T30249] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:31 executing program 0: semget$private(0x0, 0x1, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/hci\x00') ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000180)={0xfffffffff9413fa0, 0x10001, 0x3, 0x1000, 0x14, 0x7, 0x8001, 0xfff, 0xff, 0x100000000}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x0, 0x200, 0x400, @local, 'irlan0\x00'}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0), 0x4) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x110, r2, 0x0) 10:19:31 executing program 5 (fault-call:1 fault-nth:9): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:31 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\xf9', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 605.560071][T30276] overlayfs: unrecognized mount option "lowerdi¬q &•mé0" or missing value [ 605.629144][T30285] overlayfs: './file0' not a directory [ 605.643599][T30287] overlayfs: './file0' not a directory [ 605.650073][T30284] overlayfs: unrecognized mount option "lowerdi¬q &•mé0" or missing value [ 605.654752][T30289] FAULT_INJECTION: forcing a failure. [ 605.654752][T30289] name failslab, interval 1, probability 0, space 0, times 0 [ 605.688371][T30289] CPU: 0 PID: 30289 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 605.697419][T30289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 605.707475][T30289] Call Trace: [ 605.710772][T30289] dump_stack+0x1db/0x2d0 [ 605.715119][T30289] ? dump_stack_print_info.cold+0x20/0x20 [ 605.720861][T30289] should_fail.cold+0xa/0x14 [ 605.725461][T30289] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 605.731283][T30289] ? ___might_sleep+0x1e7/0x310 10:19:31 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2d, 0xd1) 10:19:31 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x200000000004000) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0xd1) [ 605.736137][T30289] ? arch_local_save_flags+0x50/0x50 [ 605.741426][T30289] ? refcount_sub_and_test_checked+0x1f4/0x2e0 [ 605.747590][T30289] __should_failslab+0x121/0x190 [ 605.752534][T30289] should_failslab+0x9/0x14 [ 605.757044][T30289] kmem_cache_alloc_trace+0x2d1/0x760 [ 605.762425][T30289] ? sget_userns+0x14d/0x6c0 [ 605.767022][T30289] ? find_held_lock+0x35/0x120 [ 605.771780][T30289] alloc_super+0xca/0xa10 [ 605.776099][T30289] ? destroy_unused_super.part.0+0x110/0x110 [ 605.782060][T30289] ? kasan_check_read+0x11/0x20 [ 605.786891][T30289] ? do_raw_spin_unlock+0xa0/0x330 [ 605.791990][T30289] ? do_raw_spin_trylock+0x270/0x270 [ 605.797257][T30289] sget_userns+0x164/0x6c0 [ 605.801651][T30289] ? get_anon_bdev+0xc0/0xc0 [ 605.806221][T30289] ? vfs_get_super+0x260/0x260 [ 605.810964][T30289] ? security_capable+0x9b/0xd0 [ 605.815804][T30289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.822034][T30289] ? ns_capable_common+0x93/0x100 [ 605.827045][T30289] ? get_anon_bdev+0xc0/0xc0 [ 605.831676][T30289] sget+0x10c/0x150 [ 605.835464][T30289] ? ovl_show_options+0x550/0x550 [ 605.840586][T30289] mount_nodev+0x31/0x110 [ 605.844902][T30289] ovl_mount+0x2d/0x40 [ 605.848950][T30289] ? ovl_own_xattr_set+0x10/0x10 [ 605.853872][T30289] legacy_get_tree+0xf2/0x200 [ 605.858540][T30289] vfs_get_tree+0x123/0x450 [ 605.863024][T30289] do_mount+0x1622/0x2fa0 [ 605.867331][T30289] ? calibrate_delay.cold+0x47b/0x539 [ 605.872684][T30289] ? copy_mount_string+0x40/0x40 [ 605.877599][T30289] ? retint_kernel+0x2d/0x2d [ 605.882173][T30289] ? copy_mount_options+0x244/0x440 [ 605.887361][T30289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 605.893578][T30289] ? copy_mount_options+0x30e/0x440 [ 605.898758][T30289] ksys_mount+0xdb/0x150 [ 605.902988][T30289] __x64_sys_mount+0xbe/0x150 [ 605.907649][T30289] do_syscall_64+0x1a3/0x800 [ 605.912226][T30289] ? syscall_return_slowpath+0x5f0/0x5f0 [ 605.917838][T30289] ? prepare_exit_to_usermode+0x232/0x3b0 [ 605.923539][T30289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 605.929104][T30289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 605.934976][T30289] RIP: 0033:0x458099 [ 605.938858][T30289] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 605.958442][T30289] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 605.966837][T30289] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 605.974791][T30289] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:31 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) 10:19:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x181100) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7fffffff) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f4a6849652f8578e6687999586a46978efacea2302c776f"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 10:19:31 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x7f', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 605.982751][T30289] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 605.990720][T30289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 605.998822][T30289] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:31 executing program 5 (fault-call:1 fault-nth:10): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:31 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80000000, &(0x7f0000000040)="0acf25f96d3b354430d9827b58") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 606.068519][T30302] overlayfs: unrecognized mount option "wo" or missing value [ 606.115620][T30305] overlayfs: unrecognized mount option "wo" or missing value 10:19:32 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000040)=""/6, 0x6}, &(0x7f0000000080), 0xf}, 0x20) 10:19:32 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x8c', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 606.182714][T30311] FAULT_INJECTION: forcing a failure. [ 606.182714][T30311] name failslab, interval 1, probability 0, space 0, times 0 [ 606.195920][T30313] overlayfs: './file0' not a directory [ 606.226047][T30316] overlayfs: './file0' not a directory [ 606.246916][T30311] CPU: 0 PID: 30311 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 606.255956][T30311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.266012][T30311] Call Trace: [ 606.269312][T30311] dump_stack+0x1db/0x2d0 10:19:32 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\xf6', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 606.273655][T30311] ? dump_stack_print_info.cold+0x20/0x20 [ 606.279377][T30311] ? __kmalloc+0x15c/0x740 [ 606.283795][T30311] ? __list_lru_init+0x13f/0x850 [ 606.288737][T30311] ? alloc_super+0x8c3/0xa10 [ 606.293338][T30311] ? sget_userns+0x164/0x6c0 [ 606.297928][T30311] ? sget+0x10c/0x150 [ 606.301911][T30311] ? ovl_mount+0x2d/0x40 [ 606.306159][T30311] should_fail.cold+0xa/0x14 [ 606.310768][T30311] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 606.316592][T30311] ? ___might_sleep+0x1e7/0x310 [ 606.321447][T30311] ? arch_local_save_flags+0x50/0x50 10:19:32 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 606.326740][T30311] ? check_preemption_disabled+0x48/0x290 [ 606.332487][T30311] __should_failslab+0x121/0x190 [ 606.337435][T30311] should_failslab+0x9/0x14 [ 606.341942][T30311] kmem_cache_alloc_node_trace+0x270/0x720 [ 606.347774][T30311] __kmalloc_node+0x3d/0x70 [ 606.352288][T30311] kvmalloc_node+0x68/0x100 [ 606.356803][T30311] __list_lru_init+0x5d5/0x850 [ 606.361575][T30311] ? list_lru_destroy+0x520/0x520 [ 606.366599][T30311] ? down_read+0x120/0x120 10:19:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e3ec351ce61707065726469723d2e2f66696c65302c6c6f7765726469723d2e288e696c65302c776f726b6469723d2e2f66"]) umount2(&(0x7f00000000c0)='./file1\x00', 0x3) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000040)={0x3, 0x7, 0x4, 0xc4, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}]}) sendfile(r1, r1, 0x0, 0xd1) [ 606.367181][T30327] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 606.371018][T30311] ? init_wait_entry+0x1c0/0x1c0 [ 606.384214][T30311] ? prealloc_shrinker+0xdf/0x340 [ 606.389248][T30311] alloc_super+0x8c3/0xa10 [ 606.393667][T30311] ? destroy_unused_super.part.0+0x110/0x110 [ 606.399668][T30311] sget_userns+0x164/0x6c0 [ 606.404086][T30311] ? get_anon_bdev+0xc0/0xc0 [ 606.408665][T30311] ? vfs_get_super+0x260/0x260 [ 606.413410][T30311] ? security_capable+0x9b/0xd0 [ 606.418243][T30311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.424461][T30311] ? ns_capable_common+0x93/0x100 [ 606.429577][T30311] ? get_anon_bdev+0xc0/0xc0 [ 606.434147][T30311] sget+0x10c/0x150 [ 606.438040][T30311] ? ovl_show_options+0x550/0x550 [ 606.443053][T30311] mount_nodev+0x31/0x110 [ 606.447374][T30311] ovl_mount+0x2d/0x40 [ 606.451435][T30311] ? ovl_own_xattr_set+0x10/0x10 [ 606.456356][T30311] legacy_get_tree+0xf2/0x200 [ 606.461020][T30311] vfs_get_tree+0x123/0x450 [ 606.465506][T30311] do_mount+0x1622/0x2fa0 [ 606.469831][T30311] ? copy_mount_string+0x40/0x40 [ 606.474763][T30311] ? kmem_cache_alloc_trace+0x354/0x760 [ 606.480285][T30311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 606.486508][T30311] ? _copy_from_user+0xdd/0x150 [ 606.491350][T30311] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.497598][T30311] ? copy_mount_options+0x30e/0x440 [ 606.502805][T30311] ksys_mount+0xdb/0x150 [ 606.507027][T30311] __x64_sys_mount+0xbe/0x150 [ 606.511684][T30311] do_syscall_64+0x1a3/0x800 [ 606.516255][T30311] ? syscall_return_slowpath+0x5f0/0x5f0 [ 606.521866][T30311] ? prepare_exit_to_usermode+0x232/0x3b0 [ 606.527597][T30311] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 606.533144][T30311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 606.539020][T30311] RIP: 0033:0x458099 [ 606.542894][T30311] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 606.562484][T30311] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:19:32 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x30, 0xd1) [ 606.570874][T30311] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 606.578821][T30311] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 606.586768][T30311] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 606.594738][T30311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 606.602703][T30311] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:32 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:32 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000100)={r3, 0x9fd6, 0x2, 0x80, 0x6, 0x5, 0xfffffffffffffffb}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000140)={0x0, 0x2710}, 0x10) 10:19:32 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065721474ff3f48a3efd5df6474fd3d2e2f66696c65322cf2bb6c6f7765726469723d2e2f665d6c65302c776f726b6469"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:32 executing program 5 (fault-call:1 fault-nth:11): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 606.623846][T30329] overlayfs: './file0' not a directory [ 606.694379][T30331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 606.696968][T30336] Unknown ioctl -2147202832 [ 606.749051][T30342] overlayfs: unrecognized mount option "un>ÃQÎapperdir=./file0" or missing value [ 606.760938][T30343] FAULT_INJECTION: forcing a failure. [ 606.760938][T30343] name failslab, interval 1, probability 0, space 0, times 0 [ 606.765961][T30339] overlayfs: unrecognized mount option "uppertÿ?H£ïÕßdtý=./file2" or missing value [ 606.790859][T30343] CPU: 0 PID: 30343 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 606.799890][T30343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.810043][T30343] Call Trace: [ 606.810087][T30345] overlayfs: unrecognized mount option "un>ÃQÎapperdir=./file0" or missing value [ 606.813331][T30343] dump_stack+0x1db/0x2d0 [ 606.813351][T30343] ? dump_stack_print_info.cold+0x20/0x20 [ 606.813378][T30343] should_fail.cold+0xa/0x14 [ 606.837084][T30343] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 606.842905][T30343] ? ___might_sleep+0x1e7/0x310 [ 606.846683][T30346] overlayfs: unrecognized mount option "uppertÿ?H£ïÕßdtý=./file2" or missing value [ 606.847771][T30343] ? arch_local_save_flags+0x50/0x50 [ 606.847788][T30343] ? check_preemption_disabled+0x48/0x290 [ 606.847812][T30343] __should_failslab+0x121/0x190 [ 606.873055][T30343] should_failslab+0x9/0x14 [ 606.877559][T30343] kmem_cache_alloc_trace+0x2d1/0x760 [ 606.881061][T30347] overlayfs: './file0' not a directory [ 606.882934][T30343] ? rcu_read_lock_sched_held+0x110/0x130 [ 606.882958][T30343] __memcg_init_list_lru_node+0xef/0x2e0 10:19:32 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x1) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2ebc0fffffffffffff6f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1f4d) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:32 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="5b007065726469723d2e2f66696c6530ac6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0xf918, 0x6, 0x800, 0x800, 0x0, 0x57, 0x24800, 0xf, 0x3, 0x0, 0x3, 0x1d68, 0x3, 0x6, 0x80000, 0x8, 0x3, 0x8, 0x478728b8, 0x7, 0x10001, 0xfffffffffffffff9, 0x9, 0x9f, 0x40, 0xc5, 0xf3, 0x4, 0x800, 0x0, 0x10000, 0x9, 0x2, 0x6, 0x4, 0x80000001, 0x0, 0x94, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x20000, 0x8, 0x32, 0x7, 0xdd, 0x6, 0xd7d}, 0xffffffffffffffff, 0xf, r1, 0x8) sendfile(r2, r0, 0x0, 0x4e) [ 606.894104][T30343] ? kvfree_rcu+0x20/0x20 [ 606.904031][T30343] ? kasan_kmalloc+0x9/0x10 [ 606.908539][T30343] ? __kmalloc_node+0x4e/0x70 [ 606.913223][T30343] __list_lru_init+0x4d9/0x850 [ 606.917995][T30343] ? list_lru_destroy+0x520/0x520 [ 606.923026][T30343] ? down_read+0x120/0x120 [ 606.927444][T30343] ? init_wait_entry+0x1c0/0x1c0 [ 606.932376][T30343] ? prealloc_shrinker+0xdf/0x340 [ 606.937409][T30343] alloc_super+0x8c3/0xa10 [ 606.941831][T30343] ? destroy_unused_super.part.0+0x110/0x110 10:19:32 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f9165040000003d2e2f44696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 606.943503][T30352] overlayfs: missing 'workdir' [ 606.947829][T30343] sget_userns+0x164/0x6c0 [ 606.947848][T30343] ? get_anon_bdev+0xc0/0xc0 [ 606.947865][T30343] ? vfs_get_super+0x260/0x260 [ 606.947883][T30343] ? security_capable+0x9b/0xd0 [ 606.957065][T30353] overlayfs: missing 'workdir' [ 606.961596][T30343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 606.961612][T30343] ? ns_capable_common+0x93/0x100 [ 606.961635][T30343] ? get_anon_bdev+0xc0/0xc0 [ 606.991744][T30343] sget+0x10c/0x150 10:19:32 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x41, 0xd1) [ 606.995559][T30343] ? ovl_show_options+0x550/0x550 [ 607.000580][T30343] mount_nodev+0x31/0x110 [ 607.000596][T30343] ovl_mount+0x2d/0x40 [ 607.000613][T30343] ? ovl_own_xattr_set+0x10/0x10 [ 607.008966][T30343] legacy_get_tree+0xf2/0x200 [ 607.008990][T30343] vfs_get_tree+0x123/0x450 [ 607.023043][T30343] do_mount+0x1622/0x2fa0 [ 607.027368][T30343] ? calibrate_delay.cold+0x47b/0x539 [ 607.032752][T30343] ? copy_mount_string+0x40/0x40 [ 607.037702][T30343] ? retint_kernel+0x2d/0x2d [ 607.039469][T30355] overlayfs: unrecognized mount option "lo‘e" or missing value 10:19:32 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file1\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) chroot(&(0x7f0000000040)='./file1\x00') r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 607.042311][T30343] ? copy_mount_options+0x244/0x440 [ 607.042326][T30343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.042346][T30343] ? copy_mount_options+0x30e/0x440 [ 607.065807][T30357] overlayfs: unrecognized mount option "lo‘e" or missing value [ 607.066632][T30343] ksys_mount+0xdb/0x150 [ 607.066652][T30343] __x64_sys_mount+0xbe/0x150 [ 607.066672][T30343] do_syscall_64+0x1a3/0x800 [ 607.087744][T30343] ? syscall_return_slowpath+0x5f0/0x5f0 [ 607.093382][T30343] ? prepare_exit_to_usermode+0x232/0x3b0 [ 607.099107][T30343] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 607.099134][T30343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.110521][T30343] RIP: 0033:0x458099 [ 607.110536][T30343] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.110549][T30343] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 607.142404][T30343] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:33 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:33 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x0, 0xffffffffffff8001, 0x14}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:33 executing program 5 (fault-call:1 fault-nth:12): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 607.143910][T30360] overlayfs: unrecognized mount option "[" or missing value [ 607.150371][T30343] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 607.150381][T30343] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 607.150390][T30343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 607.150399][T30343] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 607.210804][T30365] overlayfs: './file0' not a directory [ 607.224800][T30364] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 607.243592][T30370] FAULT_INJECTION: forcing a failure. [ 607.243592][T30370] name failslab, interval 1, probability 0, space 0, times 0 [ 607.263354][T30370] CPU: 0 PID: 30370 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 607.272386][T30370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.282437][T30370] Call Trace: [ 607.285740][T30370] dump_stack+0x1db/0x2d0 [ 607.290086][T30370] ? dump_stack_print_info.cold+0x20/0x20 [ 607.295826][T30370] should_fail.cold+0xa/0x14 [ 607.300419][T30370] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 607.304389][T30373] overlayfs: unrecognized mount option "[" or missing value [ 607.306245][T30370] ? ___might_sleep+0x1e7/0x310 [ 607.306263][T30370] ? arch_local_save_flags+0x50/0x50 [ 607.306284][T30370] ? prealloc_shrinker+0x20e/0x340 [ 607.328739][T30370] __should_failslab+0x121/0x190 [ 607.333699][T30370] should_failslab+0x9/0x14 [ 607.338210][T30370] __kmalloc+0x2dc/0x740 [ 607.342446][T30370] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 607.347985][T30370] ? __lock_is_held+0xb6/0x140 [ 607.351119][T30375] overlayfs: './file0' not a directory [ 607.352743][T30370] ? __list_lru_init+0x13f/0x850 10:19:33 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x45, 0xd1) [ 607.352760][T30370] __list_lru_init+0x13f/0x850 [ 607.352778][T30370] ? list_lru_destroy+0x520/0x520 [ 607.372889][T30370] ? down_write_nested+0x130/0x130 [ 607.377997][T30370] ? down_read+0x120/0x120 [ 607.382501][T30370] ? init_wait_entry+0x1c0/0x1c0 [ 607.387427][T30370] ? prealloc_shrinker+0xdf/0x340 [ 607.392426][T30370] alloc_super+0x8c3/0xa10 [ 607.396817][T30370] ? destroy_unused_super.part.0+0x110/0x110 [ 607.402781][T30370] sget_userns+0x164/0x6c0 [ 607.407174][T30370] ? get_anon_bdev+0xc0/0xc0 [ 607.411738][T30370] ? vfs_get_super+0x260/0x260 [ 607.416476][T30370] ? security_capable+0x9b/0xd0 [ 607.421302][T30370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.427515][T30370] ? ns_capable_common+0x93/0x100 [ 607.432517][T30370] ? get_anon_bdev+0xc0/0xc0 [ 607.437084][T30370] sget+0x10c/0x150 [ 607.440871][T30370] ? ovl_show_options+0x550/0x550 [ 607.445873][T30370] mount_nodev+0x31/0x110 [ 607.450179][T30370] ovl_mount+0x2d/0x40 [ 607.454245][T30370] ? ovl_own_xattr_set+0x10/0x10 [ 607.459190][T30370] legacy_get_tree+0xf2/0x200 [ 607.463844][T30370] vfs_get_tree+0x123/0x450 [ 607.468326][T30370] do_mount+0x1622/0x2fa0 [ 607.472632][T30370] ? copy_mount_string+0x40/0x40 [ 607.477548][T30370] ? kmem_cache_alloc_trace+0x354/0x760 [ 607.483069][T30370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.489282][T30370] ? copy_mount_options+0x30e/0x440 [ 607.494467][T30370] ksys_mount+0xdb/0x150 [ 607.498691][T30370] __x64_sys_mount+0xbe/0x150 [ 607.503348][T30370] do_syscall_64+0x1a3/0x800 [ 607.507919][T30370] ? syscall_return_slowpath+0x5f0/0x5f0 [ 607.513526][T30370] ? prepare_exit_to_usermode+0x232/0x3b0 [ 607.519225][T30370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 607.524852][T30370] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.530730][T30370] RIP: 0033:0x458099 [ 607.534612][T30370] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.554206][T30370] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:19:33 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:33 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) getsockopt(r1, 0x2, 0x7, &(0x7f0000000040)=""/92, &(0x7f00000000c0)=0x5c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0x94, [], 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000140)=""/148}, &(0x7f0000000280)=0x78) 10:19:33 executing program 4: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000002c0)={r1, 0x2}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000080)={0xac2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x7}}, 0x18) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r5, 0x0, 0x0) 10:19:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./filerkdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x8, 0x5, 0x6, 0xffffffff, 0x6}) sendfile(r1, r1, 0x0, 0xd1) [ 607.562593][T30370] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 607.570541][T30370] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 607.578489][T30370] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 607.586436][T30370] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 607.594384][T30370] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:33 executing program 5 (fault-call:1 fault-nth:13): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 607.684502][T30381] overlayfs: missing 'workdir' [ 607.690793][T30378] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 607.703562][T30388] overlayfs: missing 'workdir' 10:19:33 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:33 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 607.748190][T30391] FAULT_INJECTION: forcing a failure. [ 607.748190][T30391] name failslab, interval 1, probability 0, space 0, times 0 [ 607.750344][T30386] overlayfs: './file0' not a directory [ 607.779350][T30394] overlayfs: './file0' not a directory 10:19:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x15, 0xd1) [ 607.807715][T30391] CPU: 0 PID: 30391 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 607.816752][T30391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.826807][T30391] Call Trace: [ 607.830101][T30391] dump_stack+0x1db/0x2d0 [ 607.834882][T30391] ? dump_stack_print_info.cold+0x20/0x20 [ 607.838228][T30399] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 607.840609][T30391] ? __x64_sys_mount+0xbe/0x150 10:19:33 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 607.840637][T30391] ? do_syscall_64+0x1a3/0x800 [ 607.840661][T30391] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.840682][T30391] ? print_usage_bug+0xd0/0xd0 [ 607.869281][T30391] should_fail.cold+0xa/0x14 [ 607.873883][T30391] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 607.879699][T30391] ? ___might_sleep+0x1e7/0x310 [ 607.884552][T30391] ? arch_local_save_flags+0x50/0x50 [ 607.889847][T30391] __should_failslab+0x121/0x190 [ 607.894791][T30391] should_failslab+0x9/0x14 [ 607.899296][T30391] kmem_cache_alloc_trace+0x2d1/0x760 10:19:33 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendfile(r1, r1, 0x0, 0xd5) [ 607.904686][T30391] __memcg_init_list_lru_node+0xef/0x2e0 [ 607.910325][T30391] ? kvfree_rcu+0x20/0x20 [ 607.914666][T30391] ? __kmalloc_node+0x4e/0x70 [ 607.917216][T30403] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 607.919347][T30391] __list_lru_init+0x4d9/0x850 [ 607.919369][T30391] ? list_lru_destroy+0x520/0x520 [ 607.919386][T30391] ? down_read+0x120/0x120 [ 607.919402][T30391] ? init_wait_entry+0x1c0/0x1c0 [ 607.919422][T30391] ? prealloc_shrinker+0xdf/0x340 [ 607.951741][T30391] alloc_super+0x8c3/0xa10 10:19:33 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 607.956164][T30391] ? destroy_unused_super.part.0+0x110/0x110 [ 607.962244][T30391] sget_userns+0x164/0x6c0 [ 607.966668][T30391] ? get_anon_bdev+0xc0/0xc0 [ 607.971264][T30391] ? vfs_get_super+0x260/0x260 [ 607.976033][T30391] ? security_capable+0x9b/0xd0 [ 607.980890][T30391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 607.983502][T30406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 607.987134][T30391] ? ns_capable_common+0x93/0x100 [ 607.987155][T30391] ? get_anon_bdev+0xc0/0xc0 [ 607.987170][T30391] sget+0x10c/0x150 [ 607.987188][T30391] ? ovl_show_options+0x550/0x550 [ 607.987203][T30391] mount_nodev+0x31/0x110 [ 607.987218][T30391] ovl_mount+0x2d/0x40 [ 607.987235][T30391] ? ovl_own_xattr_set+0x10/0x10 [ 608.027317][T30391] legacy_get_tree+0xf2/0x200 [ 608.032001][T30391] vfs_get_tree+0x123/0x450 [ 608.036516][T30391] do_mount+0x1622/0x2fa0 [ 608.040858][T30391] ? copy_mount_string+0x40/0x40 [ 608.045799][T30391] ? kmem_cache_alloc_trace+0x354/0x760 [ 608.051348][T30391] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 10:19:33 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x49, 0xd1) 10:19:33 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:33 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x2) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c806f726b6469722f6669e6c8315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000040)={0x0, 0x6}) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:33 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f2b850882ea090000000000000006aa4f3c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 608.057592][T30391] ? _copy_from_user+0xdd/0x150 [ 608.062464][T30391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.068713][T30391] ? copy_mount_options+0x30e/0x440 [ 608.073916][T30391] ksys_mount+0xdb/0x150 [ 608.078175][T30391] __x64_sys_mount+0xbe/0x150 [ 608.082857][T30391] do_syscall_64+0x1a3/0x800 [ 608.087458][T30391] ? syscall_return_slowpath+0x5f0/0x5f0 [ 608.093097][T30391] ? prepare_exit_to_usermode+0x232/0x3b0 [ 608.098824][T30391] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.104384][T30391] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.110287][T30391] RIP: 0033:0x458099 [ 608.114203][T30391] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.118236][T30413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 608.133802][T30391] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 608.133818][T30391] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:34 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @remote}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x8, {0x2, 0x4e24, @local}, 'yam0\x00'}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:34 executing program 5 (fault-call:1 fault-nth:14): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'memory'}]}, 0x200600) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r2, 0x541b, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) [ 608.133826][T30391] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 608.133835][T30391] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 608.133843][T30391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 608.133851][T30391] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 608.203713][T30413] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:34 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 608.298318][T30425] FAULT_INJECTION: forcing a failure. [ 608.298318][T30425] name failslab, interval 1, probability 0, space 0, times 0 [ 608.306400][T30429] overlayfs: unrecognized mount option "€orkdir/fiæÈ1\" or missing value [ 608.341514][T30433] overlayfs: './file0' not a directory [ 608.348303][T30434] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 608.361014][T30425] CPU: 0 PID: 30425 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 608.370041][T30425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.380092][T30425] Call Trace: [ 608.383376][T30425] dump_stack+0x1db/0x2d0 [ 608.387697][T30425] ? dump_stack_print_info.cold+0x20/0x20 [ 608.393400][T30425] ? __x64_sys_mount+0xbe/0x150 [ 608.398236][T30425] ? do_syscall_64+0x1a3/0x800 [ 608.402982][T30425] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.409032][T30425] ? print_usage_bug+0xd0/0xd0 [ 608.413899][T30425] should_fail.cold+0xa/0x14 [ 608.418472][T30425] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 608.424266][T30425] ? ___might_sleep+0x1e7/0x310 [ 608.429100][T30425] ? arch_local_save_flags+0x50/0x50 [ 608.434375][T30425] __should_failslab+0x121/0x190 [ 608.439300][T30425] should_failslab+0x9/0x14 [ 608.443787][T30425] kmem_cache_alloc_trace+0x2d1/0x760 [ 608.449145][T30425] __memcg_init_list_lru_node+0xef/0x2e0 [ 608.454762][T30425] ? kvfree_rcu+0x20/0x20 [ 608.459072][T30425] ? __kmalloc_node+0x4e/0x70 [ 608.463735][T30425] __list_lru_init+0x4d9/0x850 [ 608.468480][T30425] ? list_lru_destroy+0x520/0x520 [ 608.473486][T30425] ? down_read+0x120/0x120 [ 608.477886][T30425] ? init_wait_entry+0x1c0/0x1c0 [ 608.482805][T30425] ? prealloc_shrinker+0xdf/0x340 [ 608.487830][T30425] alloc_super+0x8c3/0xa10 [ 608.492229][T30425] ? destroy_unused_super.part.0+0x110/0x110 [ 608.498200][T30425] sget_userns+0x164/0x6c0 [ 608.502629][T30425] ? get_anon_bdev+0xc0/0xc0 [ 608.507201][T30425] ? vfs_get_super+0x260/0x260 [ 608.511944][T30425] ? security_capable+0x9b/0xd0 [ 608.516777][T30425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.522995][T30425] ? ns_capable_common+0x93/0x100 [ 608.528020][T30425] ? get_anon_bdev+0xc0/0xc0 [ 608.532596][T30425] sget+0x10c/0x150 [ 608.536389][T30425] ? ovl_show_options+0x550/0x550 [ 608.541396][T30425] mount_nodev+0x31/0x110 [ 608.545707][T30425] ovl_mount+0x2d/0x40 [ 608.549757][T30425] ? ovl_own_xattr_set+0x10/0x10 [ 608.554676][T30425] legacy_get_tree+0xf2/0x200 [ 608.559335][T30425] vfs_get_tree+0x123/0x450 [ 608.563823][T30425] do_mount+0x1622/0x2fa0 [ 608.568140][T30425] ? copy_mount_string+0x40/0x40 [ 608.573058][T30425] ? kmem_cache_alloc_trace+0x354/0x760 [ 608.578595][T30425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 608.584816][T30425] ? _copy_from_user+0xdd/0x150 [ 608.589648][T30425] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 608.595873][T30425] ? copy_mount_options+0x30e/0x440 [ 608.601058][T30425] ksys_mount+0xdb/0x150 [ 608.605288][T30425] __x64_sys_mount+0xbe/0x150 [ 608.609950][T30425] do_syscall_64+0x1a3/0x800 [ 608.614525][T30425] ? syscall_return_slowpath+0x5f0/0x5f0 [ 608.620147][T30425] ? prepare_exit_to_usermode+0x232/0x3b0 [ 608.625858][T30425] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 608.631392][T30425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.637261][T30425] RIP: 0033:0x458099 [ 608.641150][T30425] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.660735][T30425] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 608.669127][T30425] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 608.677078][T30425] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 608.685029][T30425] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:34 executing program 3 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 608.692980][T30425] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 608.700949][T30425] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 608.726775][T30435] overlayfs: unrecognized mount option "€orkdir/fiæÈ1\" or missing value 10:19:34 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4c, 0xd1) 10:19:34 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x100) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) epoll_wait(r0, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x9) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x1000}) fchdir(r1) r2 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) [ 608.764508][T30434] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:34 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 608.929838][T30449] overlayfs: filesystem on './file0' not supported as upperdir [ 608.939371][T30446] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 608.958611][T30450] overlayfs: './file0' not a directory 10:19:34 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:34 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7570706572644ad869723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c0071095387233462cc7c960ec827ab06a124904025d3c940a7c88aacbbfea292cbd9d41fe7c5050767ef90ff34fb2290a96074e29e99dbd5afb8e3fb99cf8eebd1c5e5d4e391534a68244de07c812f6f479cbbebf694cca44a93dd8face5"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) fchmodat(r1, &(0x7f0000000080)='./file1/file0\x00', 0x1) dup2(r1, r0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) write$UHID_DESTROY(r1, &(0x7f00000000c0), 0x4) 10:19:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x9, 0x8001) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) r2 = dup(r0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000001c0)=""/158, &(0x7f0000000000)=0x9e) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:34 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x50, 0xd1) [ 609.076763][T30452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:35 executing program 5 (fault-call:1 fault-nth:15): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 609.152114][T30459] overlayfs: unrecognized mount option "upperdJØir=./file0" or missing value [ 609.202873][T30462] overlayfs: unrecognized mount option "upperdJØir=./file0" or missing value [ 609.225736][T30465] overlayfs: './file0' not a directory [ 609.233360][T30464] FAULT_INJECTION: forcing a failure. [ 609.233360][T30464] name failslab, interval 1, probability 0, space 0, times 0 [ 609.254875][T30464] CPU: 1 PID: 30464 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 609.263915][T30464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.273964][T30464] Call Trace: [ 609.277260][T30464] dump_stack+0x1db/0x2d0 [ 609.281595][T30464] ? dump_stack_print_info.cold+0x20/0x20 [ 609.287315][T30464] ? __x64_sys_mount+0xbe/0x150 [ 609.292170][T30464] ? do_syscall_64+0x1a3/0x800 [ 609.296935][T30464] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.302999][T30464] ? print_usage_bug+0xd0/0xd0 [ 609.307770][T30464] should_fail.cold+0xa/0x14 [ 609.312363][T30464] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 609.318177][T30464] ? ___might_sleep+0x1e7/0x310 [ 609.323035][T30464] ? arch_local_save_flags+0x50/0x50 [ 609.328330][T30464] __should_failslab+0x121/0x190 [ 609.333272][T30464] should_failslab+0x9/0x14 [ 609.337773][T30464] kmem_cache_alloc_trace+0x2d1/0x760 [ 609.343150][T30464] __memcg_init_list_lru_node+0xef/0x2e0 [ 609.348779][T30464] ? kvfree_rcu+0x20/0x20 [ 609.353205][T30464] ? __kmalloc_node+0x4e/0x70 [ 609.357902][T30464] __list_lru_init+0x4d9/0x850 [ 609.362664][T30464] ? list_lru_destroy+0x520/0x520 [ 609.367686][T30464] ? down_read+0x120/0x120 [ 609.372101][T30464] ? init_wait_entry+0x1c0/0x1c0 [ 609.377056][T30464] ? prealloc_shrinker+0xdf/0x340 [ 609.382088][T30464] alloc_super+0x8c3/0xa10 [ 609.386517][T30464] ? destroy_unused_super.part.0+0x110/0x110 [ 609.392516][T30464] sget_userns+0x164/0x6c0 [ 609.396935][T30464] ? get_anon_bdev+0xc0/0xc0 [ 609.401527][T30464] ? vfs_get_super+0x260/0x260 [ 609.406288][T30464] ? security_capable+0x9b/0xd0 [ 609.411142][T30464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.417378][T30464] ? ns_capable_common+0x93/0x100 [ 609.422407][T30464] ? get_anon_bdev+0xc0/0xc0 [ 609.426995][T30464] sget+0x10c/0x150 [ 609.430898][T30464] ? ovl_show_options+0x550/0x550 [ 609.435925][T30464] mount_nodev+0x31/0x110 [ 609.440253][T30464] ovl_mount+0x2d/0x40 [ 609.444317][T30464] ? ovl_own_xattr_set+0x10/0x10 [ 609.449339][T30464] legacy_get_tree+0xf2/0x200 [ 609.454021][T30464] vfs_get_tree+0x123/0x450 [ 609.458526][T30464] do_mount+0x1622/0x2fa0 [ 609.462856][T30464] ? calibrate_delay.cold+0x47b/0x539 [ 609.468231][T30464] ? copy_mount_string+0x40/0x40 [ 609.473164][T30464] ? retint_kernel+0x2d/0x2d [ 609.477765][T30464] ? copy_mount_options+0x234/0x440 [ 609.482960][T30464] ? copy_mount_options+0x23a/0x440 [ 609.488155][T30464] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 609.494391][T30464] ? copy_mount_options+0x30e/0x440 [ 609.499592][T30464] ksys_mount+0xdb/0x150 [ 609.503841][T30464] __x64_sys_mount+0xbe/0x150 [ 609.508526][T30464] do_syscall_64+0x1a3/0x800 [ 609.513118][T30464] ? syscall_return_slowpath+0x5f0/0x5f0 [ 609.518750][T30464] ? prepare_exit_to_usermode+0x232/0x3b0 [ 609.524469][T30464] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 609.530032][T30464] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.535922][T30464] RIP: 0033:0x458099 [ 609.539814][T30464] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.559413][T30464] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 609.567822][T30464] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 609.575793][T30464] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 609.583764][T30464] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 609.591827][T30464] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 609.599795][T30464] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:35 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write(r1, &(0x7f0000000040)="cab1df66f4f9f9e4b0f8546117aa", 0xe) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(seed)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x17) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r4 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x2, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r5, 0x541b, 0x0) 10:19:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x6, 0x20000000000002) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x216) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0x5c, 0x4, 0x1000}, 0xc) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x2}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x2b, 0x37, 0x2, {0x1, 0x1, 0x8, r2, 0xd, 'veth0_to_hsr\x00'}}, 0x2b) 10:19:35 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:35 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x54, 0xd1) 10:19:35 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8000, 0x40) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080), 0x4) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000140)=0x14, 0x80000) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={@mcast1, 0x5f, r1}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r3, 0x0, 0x0) 10:19:35 executing program 5 (fault-call:1 fault-nth:16): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 609.717244][T30472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 609.771668][T30482] overlayfs: './file0' not a directory [ 609.786902][T30486] overlayfs: './file0' not a directory [ 609.798515][ T26] kauditd_printk_skb: 45 callbacks suppressed 10:19:35 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:35 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='overlay\x00', 0x20, &(0x7f0000000340)={[{@xino_auto='xino=auto'}, {@xino_off='xino=off'}, {@default_permissions='default_permissions'}, {@index_off='index=off'}, {@nfs_export_off='nfs_export=off'}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure='dont_measure'}, {@euid_gt={'euid>', r2}}, {@pcr={'pcr', 0x3d, 0x1b}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, 'vmnet0cgroup#!trustedem1'}}]}) [ 609.798528][ T26] audit: type=1804 audit(1547720375.681:316): pid=30477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1129/file0/file0" dev="overlay" ino=102500 res=1 [ 609.834888][T30487] FAULT_INJECTION: forcing a failure. [ 609.834888][T30487] name failslab, interval 1, probability 0, space 0, times 0 [ 609.890161][ T26] audit: type=1804 audit(1547720375.711:317): pid=30476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1003/file0/file0" dev="overlay" ino=102497 res=1 [ 609.893680][T30487] CPU: 0 PID: 30487 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 609.924706][T30487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.933894][ T26] audit: type=1804 audit(1547720375.711:318): pid=30482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1129/file0/file0" dev="overlay" ino=102500 res=1 [ 609.934749][T30487] Call Trace: [ 609.934772][T30487] dump_stack+0x1db/0x2d0 [ 609.934792][T30487] ? dump_stack_print_info.cold+0x20/0x20 [ 609.966860][T30497] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 609.967342][T30487] ? __x64_sys_mount+0xbe/0x150 [ 609.967359][T30487] ? do_syscall_64+0x1a3/0x800 10:19:35 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:35 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x58, 0xd1) 10:19:35 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 609.967384][T30487] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.996928][T30487] ? print_usage_bug+0xd0/0xd0 [ 610.001937][T30487] should_fail.cold+0xa/0x14 [ 610.005611][T30499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 610.006528][T30487] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 610.006551][T30487] ? ___might_sleep+0x1e7/0x310 [ 610.006571][T30487] ? arch_local_save_flags+0x50/0x50 [ 610.030711][T30487] __should_failslab+0x121/0x190 [ 610.035656][T30487] should_failslab+0x9/0x14 [ 610.040164][T30487] kmem_cache_alloc_trace+0x2d1/0x760 [ 610.045551][T30487] __memcg_init_list_lru_node+0xef/0x2e0 [ 610.051188][T30487] ? kvfree_rcu+0x20/0x20 [ 610.055535][T30487] ? __kmalloc_node+0x4e/0x70 [ 610.060223][T30487] __list_lru_init+0x4d9/0x850 [ 610.064995][T30487] ? list_lru_destroy+0x520/0x520 [ 610.069213][T30503] overlayfs: './file0' not a directory [ 610.070023][T30487] ? down_read+0x120/0x120 [ 610.070041][T30487] ? init_wait_entry+0x1c0/0x1c0 [ 610.070062][T30487] ? prealloc_shrinker+0xdf/0x340 [ 610.076241][ T26] audit: type=1804 audit(1547720375.771:319): pid=30502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1130/file0/file0" dev="overlay" ino=102536 res=1 [ 610.079903][T30487] alloc_super+0x8c3/0xa10 [ 610.079924][T30487] ? destroy_unused_super.part.0+0x110/0x110 [ 610.079956][T30487] sget_userns+0x164/0x6c0 [ 610.089009][ T26] audit: type=1804 audit(1547720375.771:320): pid=30502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1130/file0/file0" dev="overlay" ino=102536 res=1 [ 610.089875][T30487] ? get_anon_bdev+0xc0/0xc0 [ 610.089897][T30487] ? vfs_get_super+0x260/0x260 [ 610.130134][T30487] ? security_capable+0x9b/0xd0 [ 610.159678][T30487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.174524][T30505] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 610.175474][T30487] ? ns_capable_common+0x93/0x100 [ 610.175497][T30487] ? get_anon_bdev+0xc0/0xc0 [ 610.175508][T30487] sget+0x10c/0x150 [ 610.175528][T30487] ? ovl_show_options+0x550/0x550 [ 610.202122][T30487] mount_nodev+0x31/0x110 [ 610.206456][T30487] ovl_mount+0x2d/0x40 [ 610.210504][T30487] ? ovl_own_xattr_set+0x10/0x10 [ 610.215427][T30487] legacy_get_tree+0xf2/0x200 [ 610.220086][T30487] vfs_get_tree+0x123/0x450 [ 610.224588][T30487] do_mount+0x1622/0x2fa0 [ 610.228909][T30487] ? copy_mount_string+0x40/0x40 [ 610.233825][T30487] ? kmem_cache_alloc_trace+0x354/0x760 [ 610.239358][T30487] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.245585][T30487] ? copy_mount_options+0x30e/0x440 [ 610.250765][T30487] ksys_mount+0xdb/0x150 [ 610.254986][T30487] __x64_sys_mount+0xbe/0x150 [ 610.259642][T30487] do_syscall_64+0x1a3/0x800 [ 610.264210][T30487] ? syscall_return_slowpath+0x5f0/0x5f0 [ 610.269821][T30487] ? prepare_exit_to_usermode+0x232/0x3b0 [ 610.275539][T30487] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.281083][T30487] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.286953][T30487] RIP: 0033:0x458099 [ 610.290827][T30487] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.310451][T30487] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 610.318842][T30487] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 610.326789][T30487] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:36 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x1, &(0x7f0000000040)="a600f0b40ec3758de649336209bb0e7d538f80836a58f3c11c9ebb38a5201bdb8b8666d2d0f721b67aded80e1d1c1bee9c46fb9574b3b6b924d0f5a008fd7406f145a34c769d73a3fc3cf1452040ed0308f58fcde0755d5464d3550a40900fd29cdb741d84870d3390bf2d6665dd8b7e048ba144c5a38269574773391a4c550ab9fea52650383b20b59a9a96aacdb3931e168715e8e3e921656c344d") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:36 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x57, 0x4, 0x9, {0x80000001, 0x3}, {0x3, 0x4}, @rumble={0x7fffffff, 0x5}}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x80000000) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000b80)={0xc7f, 0x4a4, 0x6d, 0xfffffffffffffffd, 0x10, 0x8000000003, 0x401, 0x1ff, 0x3, 0x8000000000000007, 0x0, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000a80)) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x9, &(0x7f0000000840)=[{&(0x7f0000000240)="a6fb39930a4e678edaae1f717e9f5528fd3721724efa6e8a921d30724dd6df22c44b2b5777ade49c6aa1184d4cd11120d6ee4413984437cc5df66af01eef2d11994bae63baf973a47e21b14b58c5cd226a93199c2a904314ab7a6bc6c7a6a1474a7e782dd673b621037df7b38fda92f66db319ebc96547ab26ddeb9023d7988d007d771176aedd95eec33b8eb1201bb12661aa76d2504253f15cb6178cffc48cac2cb62ecab26c5269e5f0c7e49e4fcb28", 0xb1, 0x1f}, {&(0x7f0000000300)="a4192e55b90955de415502ffb96753b70228bdeaf3efe1f041ad039a88d3e9", 0x1f, 0x10001}, {&(0x7f0000000340)="ee80253c5dfc9ece587bae3c2efbbfa205f0feaee98cae46f7b6526ffbade1c77fb6f9e11c517f43c61810d8ecf8b74820cad3302131cf8277a91e399df8bac911f69136c07391fa0cc17181d102b26dab9f3a1546c0711a59fb49e6a1a00ba8b42ae87cd68a16c61ab7d19a715c81e1e7694eb18d4048c8b48fdb05aaee83cbf96474410f5644ee9c5d35b399294da7b70f933ead20f8cd2718ef34e24ff226eb46e7d65d28d575", 0xa8, 0x47}, {&(0x7f0000000400)="4532103bd5b042ff150a16a60c13a605f1988f4f7faa85e8da56061533b60aac3e1d03480fdd1aff7f", 0x29, 0x49}, {&(0x7f0000000440)="55ad2930fc4d57d108f527b901acbaf347e5bd532367aaf7273d398f5d737bcefdb90b567e5db2bed7c66b6660f2985e62f369a7ad33034cc5402fc738f946fa984e30e007ba2c3ffbcc3c5bed40aeed3b75e618e9df99ad8b778ec25da27a319786ef5e237491185c2d6c52d0419403b47b39872d82c93f275dd7815482eefd2f01e54c504d850c55a325aeb84e0f2204984dd499c8297c1d4c1858bb74f2b8b64068ef683a332e312da726a43e485fe3cba1747561ea3315d55d7479ff2ebd77da18c110", 0xc5, 0xffffffffffff24e6}, {&(0x7f0000000540)="a2bb1e406666f55465e1c2b454e43ea6b5b9f6618e58dad838109f2c422f81", 0x1f, 0x81}, {&(0x7f0000000640)="4d60b22e3782b1d4254c8dd5cd8f59b64bd561fc7363b40d01d3061b8d712e6a95f6a530122369d1ddd4818eb219cb12d8649b3ad345cb1051ab680d96e9b2836472981d8ebc4acab55c4f987518a19b9169212c0278d8f55797508420e982f804221b9c4242ada7a3c89d1a129d83a07b597f040ba514b96b6f35d97553191aeeac15415166d061b11907e0a931056e221c798644809de7bcb02b44069ff5070384ed2e6e47f13e5517909ab1d8026816046078854822d9e70feb6612586ccb29e870379ad07e1f565d9c8036d26c051787ca1f18394404374c321b0c645a8ba16061f261220061aab98239f7370067b1e6c2a91da295", 0xf7}, {&(0x7f0000000580)="5d85c6bbdc9890b7709032e8ea967382621b209b076a3ecac15ff41d19b4edbcc33c053dfb4c435b391135d6494e21b4c576e29be7ce754533a4a68d1680a4bc2f711eeb0aa02b6cd51b90fc3150e7edf0c8b61a7c445bacc093da92764f17996c094974f1bb7bc8cd", 0x69, 0x2}, {&(0x7f0000000740)="f17820bd24c85735899364f6ec05c509c4c1da0ab6f280d9a3cec5c2ee928c332bdf85540d08d9afc9c4ca58c73be3f5f6469dea5573cd3f19eb189cb7e670459bc2445f722ddd5c8366246e0170335f6479f7d96102f2b6e0a8c945335ff72ab49a387cb9b1cc9e84f959de8a1f4a76f9c9dd98db4d0e166845e9849c80a018bafdb14f19af01832698af7e524a6374554d7f09a2379bd659d535d566bbde1f9a8a2cec601ae1f09b3c32a65e4b81a797377995140698fb429b78b52e3528d7bd19f6437535d0cf7adccd5416afb416082a57a44f3bb3b4ebe95d9cefa4d87f956782bd184dcfad4879168a127eff69e53e", 0xf2, 0x48}], 0x800003, &(0x7f0000000bc0)=ANY=[@ANYBLOB='cruft,session=0x000000000000005a,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',gid=', @ANYRESHEX=r3, @ANYBLOB="2c7375626a07d5c08edb01a179915f726f6c7d3d6c6f7765726469722c7375626a5f757365723d2d656e75782c7375626a5f586f6c652dfc2bd90e86beff6b66737472616e736d7574653d2d232d65746831766d6e65743073797374656d2c686173682c7569643eba11194e6dde4881d1e7df48e00e36045c235e56a905403e7a6200be0000628506da30d3877f896d7403c4d6d3813e225595637c1f65adf4000000000000000000000000000000000000", @ANYRESDEC=r4, @ANYBLOB=',hash,\x00']) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$binfmt_aout(r2, 0x0, 0x0) 10:19:36 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x4, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000080)={r2, 0x3f}, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0)=0x1, 0x4) [ 610.334737][T30487] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 610.342685][T30487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 610.350633][T30487] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x401, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000001c0)) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:36 executing program 5 (fault-call:1 fault-nth:17): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:36 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x121080, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) recvfrom$rose(r2, &(0x7f0000000080)=""/72, 0x48, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) [ 610.447607][T30516] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 610.525218][T30522] overlayfs: './file0' not a directory [ 610.525869][T30523] FAULT_INJECTION: forcing a failure. [ 610.525869][T30523] name failslab, interval 1, probability 0, space 0, times 0 [ 610.544459][T30527] overlayfs: './file0' not a directory 10:19:36 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 610.556516][ T26] audit: type=1804 audit(1547720376.441:321): pid=30515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1131/file0/file0" dev="overlay" ino=103482 res=1 [ 610.598170][T30533] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 610.606666][T30523] CPU: 0 PID: 30523 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 610.615686][T30523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.625737][T30523] Call Trace: [ 610.629037][T30523] dump_stack+0x1db/0x2d0 [ 610.633377][T30523] ? dump_stack_print_info.cold+0x20/0x20 [ 610.636847][ T26] audit: type=1804 audit(1547720376.441:322): pid=30515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1131/file0/file0" dev="overlay" ino=103482 res=1 [ 610.639107][T30523] ? __x64_sys_mount+0xbe/0x150 [ 610.639125][T30523] ? do_syscall_64+0x1a3/0x800 10:19:36 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0wworkdiR=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x400000) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0xffffffffffffff75) 10:19:36 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x404982) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:36 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x5c, 0xd1) 10:19:36 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x19) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x4, 0x2, 0xe9, &(0x7f0000000080)="df34496de19c1053184f43d63630ec6b50bff07b6cf7288a87d64e6c0e1a8ebc3693ac7689e45d640774c0ec6dae13e6315c6f29560ec90dbb0f59bc45092e15f11415b9c4c37db123c85dde4563d16119176221fbefd537052b59baf2eb1729b60a9889e3ad55c7a4f42961f43d3a347f57dc9c04da84346f6af4125ddcd2b3923b13a907b24c0464f8add5a8ef72aef091ed65dfef598a4c01dcf999d4791d92077a82f30599b8af1730573eed4d4c1fffdc4f0bc8e6536f5695e9a4f48025f99ad34ab3ea9b95dc23d92968ae9b8f2ff3b1cea6474cef9d3e3ab36bb06d404fce130a992e733332"}) [ 610.639142][T30523] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.639162][T30523] ? print_usage_bug+0xd0/0xd0 [ 610.668888][ T26] audit: type=1804 audit(1547720376.471:323): pid=30519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1004/file0/file0" dev="overlay" ino=102558 res=1 [ 610.669075][T30523] should_fail.cold+0xa/0x14 10:19:36 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='bond_slave_0\x00') ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 610.673921][ T26] audit: type=1804 audit(1547720376.471:324): pid=30519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1004/file0/file0" dev="overlay" ino=102558 res=1 [ 610.679862][T30523] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 610.679887][T30523] ? ___might_sleep+0x1e7/0x310 [ 610.679902][T30523] ? arch_local_save_flags+0x50/0x50 [ 610.679928][T30523] __should_failslab+0x121/0x190 [ 610.760505][T30523] should_failslab+0x9/0x14 [ 610.765020][T30523] kmem_cache_alloc_trace+0x2d1/0x760 [ 610.770419][T30523] __memcg_init_list_lru_node+0xef/0x2e0 10:19:36 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x4400) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000400)=""/4096, &(0x7f0000000040)=0x1000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) dup2(r4, r2) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) write$UHID_INPUT2(r5, &(0x7f00000001c0)={0xc, 0xe2, "9babc13d30f88bc043b5268533d5f495f00e991616d4a9b371c02dcb594c896e1c2fb6c4e1a70882546615d05f84060121ace9b3ade6a13f441a694e6ef78bcf06b655d7a18ce34a726ff8aa644e4f1676c7dc85441061f70fd331916490d7ec0342aba5111b81c03d96cba3a9fb5adc5d36dd964d94e0aea6b0fb9055bce8b4479beb186528e1c95bf77f675e2ef38b6f3ccfe69fd8eb794626508189871650cac9e0d74667f7351ebdd93eac18f35e41c0fc9c4595991fd1f9715f1eeb0dbff30b589da41d6b779e3019af3f31b56fa890cfc6312274003d1c34df43dc756ea7a2"}, 0xe8) r6 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 610.776052][T30523] ? kvfree_rcu+0x20/0x20 [ 610.780392][T30523] ? __kmalloc_node+0x4e/0x70 [ 610.785087][T30523] __list_lru_init+0x4d9/0x850 [ 610.789855][T30523] ? list_lru_destroy+0x520/0x520 [ 610.794885][T30523] ? down_read+0x120/0x120 [ 610.799314][T30523] ? init_wait_entry+0x1c0/0x1c0 [ 610.804254][T30523] ? prealloc_shrinker+0xdf/0x340 [ 610.809285][T30523] alloc_super+0x8c3/0xa10 [ 610.813705][T30523] ? destroy_unused_super.part.0+0x110/0x110 [ 610.819704][T30523] sget_userns+0x164/0x6c0 10:19:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7f, &(0x7f0000000040)="0af51f76cb66c8023c0700") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/134) 10:19:36 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/rt_acct\x00') r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001b00)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000001c00)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001d00)={0x0, @broadcast, @loopback}, &(0x7f0000001d40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001d80)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000001e80)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f0000001f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001fc0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002040)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002080)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000002980)={@initdev, 0x0}, &(0x7f00000029c0)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000002ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002b00)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000002b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002b80)=0x14, 0x800) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000002bc0)={@local, @rand_addr, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002d40)={@multicast1, @dev, 0x0}, &(0x7f0000002d80)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002e00)={'dummy0\x00', 0x0}) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002e40)={@remote, @rand_addr, 0x0}, &(0x7f0000002e80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002ec0)={'team0\x00', 0x0}) accept4(r0, &(0x7f0000003000)=@hci={0x1f, 0x0}, &(0x7f0000003080)=0x80, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003200)={{{@in=@initdev, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000003300)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000003340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003380)=0x14) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x9, 0xfffffffffffff65c, 0xb6000000, 0x5, 0x3, 0x0, 0x10000, 0x2c916467, 0x5, 0x4, 0x0, 0x6, 0xffffffff}, {0x5bb0, 0x401, 0xffffffffffffffc0, 0x1000, 0x0, 0xfff, 0x1, 0x7, 0x49ab, 0x24, 0x60000000000, 0x9, 0x3}, {0x20, 0x0, 0x3, 0x9, 0x80000001, 0x1ff, 0x3, 0x9, 0xf1, 0x5, 0x941, 0x3, 0x3ff}], 0x3d}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003440)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000003480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000034c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000003c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003500)={0x68c, r4, 0x201, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r7}, {0x1c0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xb7d}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6d}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x8000, 0xe49, 0x0, 0x4}, {0x7, 0xc782, 0x1, 0x400}, {0x8, 0x7, 0xc2, 0x7fff}, {0x9, 0xffffffffffffffe0, 0x5, 0x5}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r11}, {0xf0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xe2f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r15}, {0x1cc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x9, 0x1d01, 0x401, 0x8}, {0x17cbe0000, 0x69, 0x7, 0x7}, {0x1856, 0xfffffffffffffff9, 0x9, 0x10d9}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1948}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r19}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7d}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x4}}, {{0x8, 0x1, r22}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}]}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) [ 610.824124][T30523] ? get_anon_bdev+0xc0/0xc0 [ 610.828724][T30523] ? vfs_get_super+0x260/0x260 [ 610.833491][T30523] ? security_capable+0x9b/0xd0 [ 610.838348][T30523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.844596][T30523] ? ns_capable_common+0x93/0x100 [ 610.849631][T30523] ? get_anon_bdev+0xc0/0xc0 [ 610.854221][T30523] sget+0x10c/0x150 [ 610.858035][T30523] ? ovl_show_options+0x550/0x550 [ 610.863064][T30523] mount_nodev+0x31/0x110 [ 610.867412][T30523] ovl_mount+0x2d/0x40 [ 610.871487][T30523] ? ovl_own_xattr_set+0x10/0x10 10:19:36 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x100) ioctl$KDDELIO(r2, 0x4b35, 0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000080)={0x80, 0x0, 0x80000000, 0x4, 0x400000000000}) [ 610.876438][T30523] legacy_get_tree+0xf2/0x200 [ 610.881125][T30523] vfs_get_tree+0x123/0x450 [ 610.885633][T30523] do_mount+0x1622/0x2fa0 [ 610.889975][T30523] ? copy_mount_string+0x40/0x40 [ 610.894921][T30523] ? kmem_cache_alloc_trace+0x354/0x760 [ 610.900474][T30523] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 610.906726][T30523] ? _copy_from_user+0xdd/0x150 [ 610.911581][T30523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 610.917820][T30523] ? copy_mount_options+0x30e/0x440 [ 610.923022][T30523] ksys_mount+0xdb/0x150 [ 610.927276][T30523] __x64_sys_mount+0xbe/0x150 [ 610.931961][T30523] do_syscall_64+0x1a3/0x800 [ 610.936562][T30523] ? syscall_return_slowpath+0x5f0/0x5f0 [ 610.942214][T30523] ? prepare_exit_to_usermode+0x232/0x3b0 [ 610.947937][T30523] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 610.953495][T30523] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.959396][T30523] RIP: 0033:0x458099 [ 610.963312][T30523] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.982906][T30523] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 610.991297][T30523] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 610.999253][T30523] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 611.007206][T30523] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 611.015178][T30523] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 611.023145][T30523] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:36 executing program 5 (fault-call:1 fault-nth:18): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:36 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:36 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x6c8b80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x10f001, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 611.096044][T30560] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 611.096973][T30563] FAULT_INJECTION: forcing a failure. [ 611.096973][T30563] name failslab, interval 1, probability 0, space 0, times 0 [ 611.147477][T30563] CPU: 1 PID: 30563 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 611.156547][T30563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.159844][T30566] overlayfs: missing 'workdir' [ 611.166595][T30563] Call Trace: [ 611.166619][T30563] dump_stack+0x1db/0x2d0 [ 611.166638][T30563] ? dump_stack_print_info.cold+0x20/0x20 [ 611.166652][T30563] ? __x64_sys_mount+0xbe/0x150 [ 611.166666][T30563] ? do_syscall_64+0x1a3/0x800 [ 611.166681][T30563] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.166700][T30563] ? print_usage_bug+0xd0/0xd0 [ 611.175961][T30568] overlayfs: missing 'workdir' [ 611.179036][T30563] should_fail.cold+0xa/0x14 [ 611.204007][ T26] audit: type=1804 audit(1547720377.071:325): pid=30566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1132/file0/file0" dev="sda1" ino=16721 res=1 [ 611.205111][T30563] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 611.205134][T30563] ? ___might_sleep+0x1e7/0x310 [ 611.205153][T30563] ? arch_local_save_flags+0x50/0x50 [ 611.255616][T30563] __should_failslab+0x121/0x190 [ 611.260576][T30563] should_failslab+0x9/0x14 [ 611.265060][T30563] kmem_cache_alloc_trace+0x2d1/0x760 [ 611.270417][T30563] __memcg_init_list_lru_node+0xef/0x2e0 [ 611.276048][T30563] ? kvfree_rcu+0x20/0x20 [ 611.280363][T30563] ? __kmalloc_node+0x4e/0x70 [ 611.285057][T30563] __list_lru_init+0x4d9/0x850 [ 611.289810][T30563] ? list_lru_destroy+0x520/0x520 [ 611.294811][T30563] ? down_read+0x120/0x120 [ 611.299209][T30563] ? init_wait_entry+0x1c0/0x1c0 [ 611.304125][T30563] ? prealloc_shrinker+0xdf/0x340 [ 611.309136][T30563] alloc_super+0x8c3/0xa10 [ 611.313535][T30563] ? destroy_unused_super.part.0+0x110/0x110 [ 611.319499][T30563] sget_userns+0x164/0x6c0 [ 611.323898][T30563] ? get_anon_bdev+0xc0/0xc0 [ 611.328481][T30563] ? vfs_get_super+0x260/0x260 [ 611.333242][T30563] ? security_capable+0x9b/0xd0 [ 611.338075][T30563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.344296][T30563] ? ns_capable_common+0x93/0x100 [ 611.349338][T30563] ? get_anon_bdev+0xc0/0xc0 [ 611.354040][T30563] sget+0x10c/0x150 [ 611.357827][T30563] ? ovl_show_options+0x550/0x550 [ 611.362843][T30563] mount_nodev+0x31/0x110 [ 611.367158][T30563] ovl_mount+0x2d/0x40 [ 611.371207][T30563] ? ovl_own_xattr_set+0x10/0x10 [ 611.376130][T30563] legacy_get_tree+0xf2/0x200 [ 611.380790][T30563] vfs_get_tree+0x123/0x450 [ 611.385272][T30563] do_mount+0x1622/0x2fa0 [ 611.389585][T30563] ? copy_mount_string+0x40/0x40 [ 611.394512][T30563] ? kmem_cache_alloc_trace+0x354/0x760 [ 611.400037][T30563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.406253][T30563] ? _copy_from_user+0xdd/0x150 [ 611.411087][T30563] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.417310][T30563] ? copy_mount_options+0x30e/0x440 [ 611.422500][T30563] ksys_mount+0xdb/0x150 [ 611.426727][T30563] __x64_sys_mount+0xbe/0x150 [ 611.431394][T30563] do_syscall_64+0x1a3/0x800 [ 611.435965][T30563] ? syscall_return_slowpath+0x5f0/0x5f0 [ 611.441575][T30563] ? prepare_exit_to_usermode+0x232/0x3b0 [ 611.447280][T30563] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 611.452827][T30563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.458698][T30563] RIP: 0033:0x458099 [ 611.462572][T30563] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.482156][T30563] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 611.490544][T30563] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:37 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f76696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d60864e02bb2e2f66696c65315c00"]) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000740), &(0x7f0000000780)=0x40) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @speck128}) bind$can_raw(r1, &(0x7f0000000380)={0x1d, r2}, 0xfffffffffffffd3d) fchdir(r1) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000080)={0x3f, 0x4, [0xd3]}) write$binfmt_aout(r3, 0x0, 0x6f66381ce6040b86) fsetxattr$security_ima(r3, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000340)=@ng={0x4, 0xc, "b22d1afe2b1dfa1a20bcec"}, 0xd, 0x3) 10:19:37 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x8100, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x401, 0x101800) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') getpeername$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x40000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x8, 0x240000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r2, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x200}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f00000000c0)="5513cc36d64d955a20127bcccbe6cd9485a7ac4bad6d2c06635e5d03c44e9f01f1df3e65c9c4066472c8309bfe5637e7d24ec66eb54a28cb6126619ef1dc8451f7a968f139a1", 0x46) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000300)=0xa) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000340)={0x5, 0x16c4a7b7, 0x938b05dbed216954, 0xffffffff, 0xffffffff, 0x6, 0x1, 0x800, r5}, &(0x7f0000000380)=0x20) r6 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$ASHMEM_SET_PROT_MASK(r3, 0x40087705, &(0x7f0000000280)={0x100, 0x1000}) fcntl$setpipe(r0, 0x407, 0x10000) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0xae986a9d8088cb3a) [ 611.498491][T30563] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 611.506448][T30563] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 611.514414][T30563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 611.522368][T30563] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:37 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x5f, 0xd1) 10:19:37 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:37 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0xa38, "23adea59c46d67b2e596f16951c068fa85e341618caef5866f97350540be8f7d", 0x2, 0x8, 0x200, 0x0, 0x2}) fgetxattr(r1, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)=""/173, 0xad) 10:19:37 executing program 5 (fault-call:1 fault-nth:19): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 611.565492][T30569] overlayfs: './file0' not a directory [ 611.596814][T30577] overlayfs: failed to resolve './vile0': -2 10:19:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r2 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140), 0x4) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) process_vm_readv(r5, &(0x7f0000001c00)=[{&(0x7f0000000740)=""/175, 0xaf}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/141, 0x8d}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/69, 0x45}, {&(0x7f0000001a40)=""/182, 0xb6}, {&(0x7f0000001b00)=""/174, 0xae}, {&(0x7f0000001bc0)=""/27, 0x1b}], 0x8, &(0x7f0000004080)=[{&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/206, 0xce}, {&(0x7f0000002d80)=""/159, 0x9f}, {&(0x7f0000002e40)=""/98, 0x62}, {&(0x7f0000002ec0)=""/169, 0xa9}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/156, 0x9c}], 0x8, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r12 = getpgrp(0x0) r13 = getpid() shmctl$IPC_SET(r2, 0x1, &(0x7f0000000480)={{0xf0bb, r4, r6, r8, r11, 0x20, 0x40}, 0x4, 0xfffffffffffffff9, 0x100, 0x3f, r12, r13, 0xb}) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x8, 0x10001, 0x400, 0xfff, 0x0, r3}) setresuid(r9, r10, r7) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, r14, 0x3}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) syz_open_dev$vcsa(&(0x7f0000000700)='/dev/vcsa#\x00', 0xb9, 0x40000) [ 611.637885][T30580] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 611.648926][T30582] FAULT_INJECTION: forcing a failure. [ 611.648926][T30582] name failslab, interval 1, probability 0, space 0, times 0 [ 611.660219][T30585] overlayfs: failed to resolve './vile0': -2 [ 611.731919][T30582] CPU: 1 PID: 30582 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 611.740974][T30582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.751026][T30582] Call Trace: [ 611.754340][T30582] dump_stack+0x1db/0x2d0 [ 611.758682][T30582] ? dump_stack_print_info.cold+0x20/0x20 [ 611.758704][T30582] ? __x64_sys_mount+0xbe/0x150 [ 611.769239][T30582] ? do_syscall_64+0x1a3/0x800 [ 611.769257][T30582] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.769273][T30582] ? print_usage_bug+0xd0/0xd0 [ 611.769302][T30582] should_fail.cold+0xa/0x14 [ 611.769322][T30582] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 611.795237][T30582] ? ___might_sleep+0x1e7/0x310 [ 611.800096][T30582] ? arch_local_save_flags+0x50/0x50 [ 611.805402][T30582] __should_failslab+0x121/0x190 [ 611.810345][T30582] should_failslab+0x9/0x14 [ 611.814857][T30582] kmem_cache_alloc_trace+0x2d1/0x760 [ 611.820239][T30582] __memcg_init_list_lru_node+0xef/0x2e0 [ 611.825874][T30582] ? kvfree_rcu+0x20/0x20 [ 611.830466][T30582] ? __kmalloc_node+0x4e/0x70 [ 611.835146][T30582] __list_lru_init+0x4d9/0x850 [ 611.839915][T30582] ? list_lru_destroy+0x520/0x520 [ 611.844945][T30582] ? down_read+0x120/0x120 [ 611.849368][T30582] ? init_wait_entry+0x1c0/0x1c0 [ 611.854328][T30582] ? prealloc_shrinker+0xdf/0x340 [ 611.859363][T30582] alloc_super+0x8c3/0xa10 [ 611.863792][T30582] ? destroy_unused_super.part.0+0x110/0x110 [ 611.869802][T30582] sget_userns+0x164/0x6c0 [ 611.874302][T30582] ? get_anon_bdev+0xc0/0xc0 [ 611.878901][T30582] ? vfs_get_super+0x260/0x260 [ 611.883670][T30582] ? security_capable+0x9b/0xd0 [ 611.888525][T30582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.894783][T30582] ? ns_capable_common+0x93/0x100 [ 611.899824][T30582] ? get_anon_bdev+0xc0/0xc0 [ 611.904408][T30582] sget+0x10c/0x150 [ 611.908225][T30582] ? ovl_show_options+0x550/0x550 [ 611.913252][T30582] mount_nodev+0x31/0x110 [ 611.917594][T30582] ovl_mount+0x2d/0x40 [ 611.921667][T30582] ? ovl_own_xattr_set+0x10/0x10 [ 611.926606][T30582] legacy_get_tree+0xf2/0x200 [ 611.931298][T30582] vfs_get_tree+0x123/0x450 [ 611.935816][T30582] do_mount+0x1622/0x2fa0 [ 611.940168][T30582] ? copy_mount_string+0x40/0x40 [ 611.945118][T30582] ? kmem_cache_alloc_trace+0x354/0x760 [ 611.950667][T30582] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 611.956923][T30582] ? _copy_from_user+0xdd/0x150 [ 611.961779][T30582] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 611.968025][T30582] ? copy_mount_options+0x30e/0x440 [ 611.973235][T30582] ksys_mount+0xdb/0x150 [ 611.977488][T30582] __x64_sys_mount+0xbe/0x150 [ 611.982175][T30582] do_syscall_64+0x1a3/0x800 [ 611.986774][T30582] ? syscall_return_slowpath+0x5f0/0x5f0 [ 611.992420][T30582] ? prepare_exit_to_usermode+0x232/0x3b0 [ 611.998678][T30582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.004247][T30582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.010149][T30582] RIP: 0033:0x458099 10:19:37 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469ef06000000000000302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r2 = getpgrp(0x0) r3 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@loopback, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) r6 = getuid() getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000500), &(0x7f0000000540)) r8 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000004400)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) fstat(r1, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000006a40)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f00000005c0)=0xe8) getresuid(&(0x7f0000006b40), &(0x7f0000006b80)=0x0, &(0x7f0000006bc0)) r13 = getuid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f000000ba00)={0x0, r0, 0x0, 0x21, &(0x7f000000b9c0)='#-eth1nodevtrustedsecurityppp1-,\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000ba40)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f000000bb40)=0xe8) r16 = getgid() r17 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000000bb80)='/dev/sequencer2\x00', 0x410000, 0x0) sendmsg$netlink(r1, &(0x7f000000bc40)={0x0, 0x0, &(0x7f000000b900)=[{&(0x7f0000000240)={0x1b8, 0x38, 0x109, 0x70bd26, 0x25dfdbfe, "", [@nested={0x54, 0x85, [@generic="4b83255bb9e97d258b29e0a65c8660aa7a03b4493d6e91d9cfdde9277b6e477d20c3f001012e26eb5e10e888666a2ebaafbc33799f5504b4cd1734e173f9ce649d0ab011ac33fae095fd7af20218"]}, @generic="38a07387731a4e86ecb0b595c9e5baaeb46fbee84f3385df508d9585b946ee6d9435044fbfa572c0e2917b3d4f3bb48166d75284ba8508", @nested={0x24, 0x5, [@typed={0x14, 0x29, @ipv6=@ipv4={[], [], @rand_addr=0x8}}, @typed={0x8, 0x3b, @u32=0x200}, @generic="e4ccd008"]}, @nested={0x70, 0x1d, [@generic="fe1c59176a78580fad601d5d19d2ef12623a2ebb618146668ff5d413611f6b6c3b91bb6cc11d48a4ccc802089de5039402b1f8de4e76e0555cc3421b22a6ae50e03e3eb9c5db36df965d5c86e523a1ccdaaac9c8bac17aa4f8759716fdc5d92f67a0c11efd9ba4cb14da5745"]}, @generic="1061eb781239efe76149dcbf03c7243c3ce93927f37608ea656b9b4c49ba49378eb03823", @generic="2622d90a977713000b0c43edf695ff1128221b36ea526eaaf74260ea6d9ae777d66eab0586028186968a9d6260599f1b01198c7d4f562b9719a1e79810163c3381799bcc71e45022aa704ab15c57573a539eb1", @typed={0x8, 0x6, @pid=r2}, @typed={0x8, 0x3c, @fd=r0}]}, 0x1b8}, {&(0x7f0000000640)={0x370, 0x1f, 0x100, 0x70bd28, 0x25dfdbfb, "", [@nested={0x290, 0x37, [@generic="ec836b02b8067335304b57fae30133badf1db4be9db534ad203432a29f13c3161eb228c405ee2bb0486bae04dcc01d8eb5b80d230133589509d4e647920e5f7f01e6bf620e8ae78eb9dac6e51cbedf575ced6e4eb6b2f09288f7537bbb2e94605d2ddf7cff59692555c349bae7cf6e1602210cd6c44d3e5cb0ac8284859a2b5c3e799e1dbdd37f268c976a9856ae4270ac26684b487d8370de409d66b54335fb25eb8f51", @generic="808efbe8f01b5a063c434d9cc82e0d902f359a8ce704a984c4aa1d8a983748070dd01d846b051fd1a699ef575e519b55c2bb19e38db634f17434dbb22118732088eff92330938d23888c9712edf57da1910547064a4087ced919aaa1442112f2d6c2efbbf44dcf7c8afe7b486703c70cd2106042d783e27bb7bec4e985c7ecf869e00e3bf25c5943d2821cce81db", @generic="bff6cccc62f6930da017f23bdf62b49efb99cabb5bf42ecbec3d787bcecfa8303385a2c9edb9a4e2eb5e9e662c0529d0e7e5bb9697ddd542b13e6b1e35c434a004ec20a641ccf210e2dccbd69f7e0fb901a8211a9a8260048ba51a5f3bba6f24f1a171c1def9ab67800d11e05e826d6ad1281c5c697c6772380f25b645a67f78e6fa97", @generic="a33dcbf485bf26e461b7510fa4245e17aa90d0ed0b812e365a3030eb536ebe74cac9e8fad9c4f838132b30671f699038ba87fed13e137bb78e22a17b767387bf253c29732f220332b1230ba013772e91a97949635bfd9b794c45757446275735801baed7ed932f2ffd6c6fafa9e292f2c797c56d1c7b15d49fa2515c21623e9262205f67c0ad1037c34b0841a163524daa0b697d0884a95cb3698244917cefde991b4e573f30824205d87b8a8086cb20738400a01d3c1b61b249041a875aa95bf3f3f5d903710c61757d0bb3f0fc675f5aa8c8f000"]}, @typed={0x8, 0x41, @pid=r3}, @generic="28e9234828feb887", @generic="500855ee5cc8934e14f66225a4d88bfdddc59f178b240fafcbd53b30b57e03a8eca55ed7cb4a0c65411263d49329be8a74e90a6e0bc854ad5de7c79a84aa1c01e576f0504521427ca9f16ccecdd4adc633e0728e236e8a09381d1e8a6c92cd8dfc6889c53b5d309461e6bd98881721b3555497d4fb9346a3871d62f9df4c4729db1a0b05353f2f84f1b986523d60178366fc73788f34ee365c8f9c748db5ef611aeeb77154b62ab1c9c8920f8be2ea2026c4b50ac22a969b3376583e38"]}, 0x370}, {&(0x7f00000009c0)={0x1220, 0x12, 0x10, 0x70bd26, 0x25dfdbfd, "", [@nested={0xc8, 0x85, [@generic="5bdee173e53473d78052f3fa6cfbc0bb2bdf2fbe9610b157a34ca858c6ed9f63c7d7f891537baea1817447249f3c66f45589cdbc1efcdb1dbb3bb560408e040b35c0e8434fd0c25cd6f64af6b8cf822aad6ac91c1e43bb84ee2eab1e8f008f24ce4782c4d14f89395c62a3c86865840131a4a4b0e77b19892a375115386cef974468150a821e18b5bea66771cac75d0f856242924bb3f662bce62fcc442642a2552ac9a0d3b708b5689ec111f2c315e4ca2e7742b02220a6bccd98d10a65ceb18b0aec"]}, @typed={0xc, 0x13, @str='overlay\x00'}, @nested={0x111c, 0x92, [@generic="739499702710085ea4e3e0a8ea9f658f13cd87166f842bed72f5fb84c5e1a0f4f52fdf9ea064653bb9c8b71cef79a14b76160d8cddd1706b16a5bfee76153ad2a09e05d679c93fd43ce327195442d4922a42731545df934919fd6acf062e274d95bba9a0dc843070ea8005221663786597a9543568077c42225dc05a84b3583d55a49e81bf82f7b762de34ac2bac391829ad817a4b974db76acbecd00710c8dd1ff4d0bd54e1c9c4f2b8a649a0be61b6342fdad8837abb5418e0", @generic="cd33c14f5416299e285a92c884a4af87898c7b71a3b54e954d6aaad727879b528d5f859fa688e2145a060cab21331cf0ee7a6993ccb17df3f11f1614249b778877a5b6a1707d270a9e45c4ed4ac393", @typed={0xc, 0x57, @u64=0x5}, @generic="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"]}, @generic="d551be82d9c49abc11613ded0d5f2204e03a9d03584033e591d229cebd1d"]}, 0x1220}, {&(0x7f0000000080)={0x18, 0x20, 0x0, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x8d, @uid=r4}]}, 0x18}, {&(0x7f0000001c00)={0x474, 0x41, 0x1, 0x70bd2a, 0x25dfdbff, "", [@generic, @generic="c1b0b29fe49fe30f44d3f346f2bc457164952a1aa6eddf85b5a67a4eeda60ed0de71797fac5cd018c94c6c7722f2f961cf5ce8e81c8187b354b87dccea3f70269aeb9447b09f1393145b", @typed={0x4, 0x3d}, @nested={0x1c, 0x69, [@typed={0x14, 0x5c, @ipv6=@local}, @typed={0x4, 0x59}]}, @nested={0x1b8, 0x6c, [@typed={0x8, 0x6, @pid=r5}, @typed={0x14, 0x27, @str='proc@em1self(\x00'}, @typed={0x8, 0xc, @fd=r0}, @generic="c236c1e77dc61de973836989e65b57549b25803b11fb631669fccb64b050eb385620fe9937ca1d5d4a4203ba798b327fb4e863767bc4b7622cc337bd363e8af71ef746a26ba334248086e3b7245172f635873fbc59a87b89cc17a36f29ecf1bd943b022947562875834e3904085ac86be15ef0a258e4fdbea7a262a6a39345639c64819ced", @generic="eb0dd085de8562d25b0b5c6f82a9f19d8ceda7409a3e18f6e522789e0880aa871422cd444ae6f0cf73267235f8b1a324ab71c3530a85c3bbcf5836c52793299b36e9f1688a401414283665eac682c28c1e8bb5ed2c94e2ca5a140769f51883008cec558dd1d7030ce0020ce54a8021e78502474ee3086fa302b8f9db820bbb80216b4b414922b8210907bd7cf75cca80864b8f0fd5fca76c201ec42720141a3868277ea4294b0dfc", @typed={0x60, 0x7b, @binary="fbac70c352ddb72094f57109295e519b9c1f743209b1664c44f6427268d662344e557d28db1020c3e39d9749e71736254fa6a4170cddea64e50ab5900f6870cbebc9eb12a1ab1f0c06b50d7fbfa7b886ec225036ee71a912fae55d44"}]}, @nested={0x240, 0x94, [@generic="cd6ba14f2cd14724a983ecea2b1535e37ae43fb22ec9ba23cf9b9749c1141944c890159d2b1e1f23224e1028467a29be886385831e0672f03e95cc92f420a45bed1dad20663c5401bfa83dd5371defa0ecafc81f04d618dda2ae9ca476b680e58d6c6716822cc557ed697b9a72b3c6a59d6090695c0aecc2dccfeb5edc", @typed={0x8, 0x34, @uid=r6}, @generic="dfded7f21610cbbbc998b9888c66f55e11cf9ff138f35233af07bee7f35b07b345ce9e64a0d68ee7aceb34bda43669cb99e41362e0b5f5d1604890a5a9194e5c4c32be46b30045b37ce7763adffb380a76212f026800d21223e9561e48a0fb05229bd0be173a43f765efc577196f2e351314b62e0addcb4f8b2ca63fb7a7cd3cebbaadf95737b9f39bfa3315671728ed545d8b0cf0688eeb33d114ec3a7cf63a646cfd428738b800d1c1b36985eb74aae268e3f1304e9253a4e5f75310f0d7ef63a34d4d8aaa9ac7a6d79319b68e604ed626704a73c4eaec4820fece7122c316acae3288b218d8d9d5364b1ba838d4", @typed={0xc, 0x3, @u64=0x1}, @typed={0x8, 0x5, @fd=r1}, @typed={0xc, 0x1d, @str='overlay\x00'}, @typed={0x8, 0x22, @u32}, @typed={0x8, 0x30, @fd=r0}, @typed={0x8, 0x49, @ipv4=@rand_addr=0x1ac}, @generic="41dde3660085e036443812ca3712836d46d97f1c27c458a5328437788f45166e7cfe0001e8176f1e96c6e29a7db226b69041c740999492020e39aa22209581570bf8a172b42d84d982236893b8edffce5744423e4ff018eba1d82d73f412513a68419cffd1feb61f9a00ffdb2815466a220bc147e07186bee303a0745c1ebcdc4d41369c229aa871a569980e1f38f3e1"]}]}, 0x474}, {&(0x7f0000002080)={0x2354, 0x30, 0x102, 0x70bd2d, 0x25dfdbfe, "", [@generic="c39e5043f7f9f959992bd17f4ffbf663bd54bcb581ccb5d2c2a484ec426722b040da9ccf9ed43fd4731e8468642df9c1a62212a7d339253d1e5938e31e8228e9bc28f041225fd98079aa2568c8c7336539ea4d1e4bc7ebd1ddd73d8a3ac7b2808cb3adb7e9bbde1a1a6b48b917f05a5f5ce94ad7f15d12", @typed={0xc, 0x50, @str='overlay\x00'}, @nested={0x121c, 0x29, [@generic="c280c41a30185627457fc7bfb37014eeb97995baecae97431575157f2b3db6ef041fbe140b4488f2cbd78f2580d4657e6a34803dd1426e12f4e80d3de3a0fae14ab016283945043e45604b36fd", @typed={0x8, 0x5b, @ipv4=@remote}, @typed={0x8, 0x7f, @uid=r7}, @generic="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", @typed={0x8, 0x4f, @pid=r8}, @generic="be8522dc8f9d73da724e72fc983965d3481cc7c025436c062586aa3c817ebd06b129ee1919bbf8178457ef9b5a2a276aacd98bb9000fec2ac1a38650d406107217b305819841ac6be83577d9381c981c943bef6a6ea1499061cd7b12b495ad683b9e24904ff83f7091588f038b4e52ec68553ff0687f3bc2bc9f995c6a6fac43f9e0533f29d6271131", @generic="7a64bd67433c41bd36ef60b0c0d54873b5fa0023ee8d4f192f945c1d5ea15458906ca963e9c23237d6f6839ca32e6c42a4d60b432d96c80fd0d7f12fc8d3", @typed={0xc, 0x6, @u64=0x2a7}, @generic="28bb33fc0a614f36604557e3f452e81f171e8fa0b92117a74146eb07bb6a8e32394ac18a84b017e6c4e7602144bb76bf7dde6c684f0bf4615443f5007660ca1306989c699a295fe1deaee38dd2009f7792923a4c3ef542271fb348269107c7d832406404c308f9e62a4fd650d308224db36af08ba8a834202574ff2d737d4f95f24cead366c58ce4d7445ae6b0b336d9df548663a557b3238d2fadae5b231c80dd0a8ac00c7d693a414e7cb2b09ab3edb83e6f982ce9d168d81e06c3bf8dec0d80997d7ed981d2c1dda994956abfa2a263adb6f5c6325b6dedfc2c3615"]}, @nested={0x10a4, 0x3d, [@generic="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", @typed={0x8, 0x32, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @typed={0x8, 0x2a, @fd=r0}, @typed={0x14, 0x15, @ipv6=@rand_addr="7c95fee632a07a0b1c3d57cf03584b16"}, @generic="a38d056d808925872dd4641cd6c7c116fcb0763d19cb45befff81647bae40eb3598e7ac62473c51966b0b0eaae89a39672009f0514ebbb5c248a6ace35e2207f3c81e866240b086e0fb060ef4db356954666c60f3e0b377d2b1216a6ce2a46da2c2ee3f5ccb5dc12516f0602c189c163e8d9095efe36847d5e77"]}]}, 0x2354}, {&(0x7f0000004580)={0x249c, 0x1f, 0x4, 0x70bd2d, 0x25dfdbff, "", [@generic="eb6840306827d3a031ae171da39fcd8b4e1e766a9ffd857b3e996db1766828a3eebd620e09d424b542492af528115c9621ee5b8bc26a065f03273f2a76fca0fb1cfc339bb36980072da6ccb3112213620ab0b641391b3cb3d931bfff6d7ce3d32fc976a01fef4280f8c1c4f587dbaec1ad05bccf3765bbb60502b927f0ae12bd6c8a46d0dfa32186b35400291fa1a09be6d74d584a5e58de6e00d9b3a65af83573a2a8c9513385a889cab2bb1c995c12ddb6a9d2c23c566f5cb83a803f1dbe1f292ae49687522c5dab3907d4450067842b99bec6863438e5", @nested={0x11b8, 0x42, [@generic="4e70a9d1ee3cbf1c680ae25eddbdd157043725c1c8885358aa8724fe0005798aec0fc08ced2106e961901ebc3b98c93f36eae2c7180d15d6e6962ad1ba4a88cbdfbf6c6a56f7c7f7daa192a90c15215a60254433a4b5db9bb4f6017220a86215c2f611e59b0fe17536d6ba37032c9c58351857f97c593832976760418b169eb4c716a9ca575378b6b39f988c005e4ca5ab99e188432d2649f99d183c2213c5c3e0d8c9d843e43ba71f240cd813f35be46a06774efd5eb7f97a0cc8d5f099668af318e2784c7b2969c0a275ca7288db69cb3fa1e5e19ab61468", @generic="575a36d82fbddf94e4e60fe45bf485e04026950dc56bf8a26a39ffea8dba4c93dff34d414d58acaa589cd869e43e5c53b1ff64d8de635c652e13c72aea9eed02dd193eb9be29432e2fd839b348f83a7b93476b40992b1af80918331c9030ba649768c7ad3503a0bfd9697c1bd8a81feb35a2249229def5f1e8b46e4b68022523b8bfcaacee51512c771668e669bde21fe5996fe89e0c9ef6f586b542580ec122783494c32cd549061199fdd70022b57eb7f6b59c3a4354433809cae1df578d56ee0e6721c961dc2ab3385537a690bf0798ae", @generic="40dcf1176d5b37481b40080cafa7c56571331d1ab170d90ddc16788b31d382c6a7f113384be8a64d93d23e4112a8cbab4b3762aad62291c2295e498f27919c94e5c3e24e0cd6bdf7186010271006392f4b1f4ca39359a18b28a023e0373dab992bc6ac840c42336119b2fffc7a50985e87ec2618e92f6086fd7ba4acb0db7b102d86fb68af175671672264602acebe6df7d754ffde5e3484155b53235eeffbe61a41d6e793630def88c2ac4f6e7c7302d3afe42ea8d0d7564b6003e18a17cee3131319b5ca6f136d8dbbe3245e245cf75f988b17fb7016d277cbfdbb4274caae0f9d6113266fe36d2af470c940c1955ba6adaa3bff01a48271009a6b1069c8460d9581e08ed40a2da703dfb0fbc49926db267700f9e2920d02524434a808dcddbd6bb07752e307406d1ea28f2ae69a9870724967b1029b46e61fd29d8db754648cd47b90d01f1b2fdb66805d54ea72745dbe07c789b3f6e203f1740482f57040a69a1cab5a8dd3ae53fd90bd47c131c47ca41227ae7503d5d7e42488d7e31cd7006ccec1cefe9711cad0d3fee2880b39f0c26ae17794724bf748628bf538942a659a418dffc8ebeed0a83a47719f3c5492c59a72c0fc484b4cdb73abb4475bd65e38ddf7f5d2bb75434e3e1c2044d5f8264243f1ee7eb70ba8094f2a909fbe881257a2a44b1800468ddc626682f0a9ce4ece77cb9042488b8c152913edd3eb735197965fa94b6aa7a894b95a35bc571a973a0d9748743dc710c7e8791fe362a5c4d21bfdb63b3ba1cf25ca79c86c34b226c37c497429e42af6ecd69844c620ddedb4aa523192e1f3d33c0ee105ae81b541b788b4e507c5aceee3ff2e3484b4b3514fd57422c1fc11230cfe23ab475be273c4b4cd1b349aafc5cc89c290c988d9b690dc5e0f54c296a716253730a38f680f6316a4e35fc0c06f145ffb907f1cf1fcd21076b8358b8bab086f73922f67df49b13dd5e6a154148ff48972851d39671a3f49a6b5f35e62fe4bd8eefc4da6e2c28550c7265658b8f1e7faeef89b54027e22aaf20945f01e2e0d697af94e0cb65f675780037f9c16a2e100c1557ed6c40f25b50a2f9d31d14e3965988f60d5bf2335c63e3081a2b507ab76437104a06b2db1efd8065ce2cb83f3eb479e7bdbc13d50e9166dcd0eb36ccde00ded931a434f88d7a3b958970f1e67b6165ada22c78b97efaa53d51552f36ea71f4acdf48f4bc2971788f0356dafcd93faf2cdab90d9c84fcf57b4cfff646740a62c8825184d233c07b1237508ce675bb3a92b61f84bfff78d60ab9ba8b679b3b2ef85081b3d8bf3e6c4ff8f9c27f072b4e502f47aaf03999a2aaf188f7d200cf268026f0e7a665d9863b94fa71220b1d034b6e1b60c2d66f71cb8c8364623d4afd11825a64e91471ec5be682389c5e6dd7703d444c4e90322877c91e86791995fb28d787151a1f45648ee6e6dbfdc28716092d26989a997760777e97eadc1e41ae0ea3634f7012dbb10ebf6e50345c8968746fcc7ad70a2de57be688ad4d31e7ce65c03ee19dff5352f6e139b8fcf3363fd97616911c65467e602e32425487aa4e9454d735f21f798f6be7dbde7acc8dddca2e78cc9595ae08cc5b846349846b2de55737062f4c5050a93559e242fe10912603a4cdbca6db131964d6cf5a4ff9f7aca094eacf652281f419e6ee5c55bb861703b49d3c53fd9ee8aab7d7f261fa6389ab645c98478bb5b27c13b9b7b44b73ac3e4e3d22f3379ccfd6914739ce2429abc909846e88c764cdf4f704c6b5a05536181350965352a7e867ed837e8c0765c93f4d117d55fbc5813083cf0d7042b8f1a6dc2238e77dbf79c03fd61484fad8e9afaeca8d2504c6965d9e7ca85afe06786ccf9ba48c9531269a4e8cdfe34c031db487be95863ac2447dd96983e4e18caf21363557060f8b5cc84b67d909089e1d45b718ec7d0830518d3325d8ae10a04bf0571a92560271a987384685def39e17c0e153db931603c6e903c3a20dfe42db916b1c04c0b33d21946c26b053cce9d2da489d4b36e2709c9a56cd3abbb597a9c9195e69ba1a6fe359392dd8ce5a58656ff860b6adcc7c924f85b4a12211274e42a8f0e1953d0702a2625a3dc2270405fdc32070f36e59d4106377bce508c6efcb4db973d76ec22e78805eaff1e4a8a5b7dbec0fd4cfa2a0d23a6c8a99da679510da4d4b06f8a6b70a2855dfcc96d2dfe28e7288026da944744161d131983647050061a0fca6d05329c1f0b9e3581f98d2d1b8b01678f117a8c2eadb3dbabc405200d64ed7beb28b52f4427319d00a6436364044ac7a8e723394393a502f11cb33de41b263dd7faee9680f341a5c2f53bf4fc73d6e17013107d77ca31f3777fde43bb86e097881ea4f9650f589cc54131a73091b5813aa1e6b5d6929f683a66fe96b54f281a5429ededcab54e4fa49fc810f0b6de3497647bf27a3ea569c1476ee2c9df654a688d816a2df391c5ff67e8548c83d31f5e63c6c94a5584e535d07aacb8fc75c0687beaadfbdc7a6eca56774b61d2e966962dc0566dcb45b880bbc5a45084ffd63a85d68ba2cce850d6412f97d7284d6ccbb12cac3e01a1b4043112e2fb175cfaf3d8fe5bb8b20055b440f40897efa685164c54a3e88b66a388e37ac23780c12ce5159052c3166e2a383fb9d738e3c4a9d4fe30f2201b2b5c2c1b130587f37b25bf45ea219b8be252908c16a0e6b76b73a73dd4d66005a3220c49c135ae453c2af3d9b8f94b75fef12453c8592d14e98cbcd0fc3b92a35d7167b85494fda0f1ae3707259d326623284a0ec16f257d20ac1f6cfc1f4a5597585464a439ba1616054e2fd7005bd72ede4a3e55831f8211c686d71ebda54dd376f3b97e9914d98e07f177aa883550915382627404816b6b9cc931215780a797d4e867e80c32fc738f64cbc15333f9b0ea3ed6ba4cb0ba60c79f5f7d31d6b5edfac5ba6bbea5f07c1dddf6d7524f1a2411f4640d45e90a4e419734de36d686028dc3b0f4d0a0d56593a7fdd45a8de7aab02ee360398234ccbb56f338361b6db314a4894c5dabe8524e1444a1b64f1ce5998a2b43fb2e081a55b9068a013faea566b601dd1cbbf582d878dad9f3e1fe3a251b9a76ddc0b0accb3c6e66e6a7ff50aab62a74d6bd1a90d4b471ff4062c3415e17ab1cb89847689a955b416830d7691444fd4ba68b4cbbf7a60e027d138cfa594e9058a1ac90f787195fad4eca8ccaa65e29821109ff1a99e52bd083cdfeea98b72460ae2aca5bc9a8d82c811ad4b9cbb981f92a53a986bfc5b71feb0ccff73c74b078d8c310310bf4e0be3c92d8637132adb8842c1505c95421caaa25677aed62ad0ef842790fdb81a3bf22a7d4ff59e26f10c6425ecab6bd82e1da1251f5cce33bfc56a28a3bfbc168544125d2a02a6bf488b0bd820a07402c7edb0303be8955d4202386f9551d0041f1e0b8f1d1e9ca9d0d3f138a020d2db86142b3400359a6aa0a740b617a9825cc7dc17f47a2c308965cae5d82dc91e1ccc029fd152989e97001acb982c364d3e564205c8e206e792bb1a3ac146c27df807cdcf41329f9a15b9e315df7bf63357ae46382b6af07a310c607e6e8bbeb61d158f9c4c97eeff92782af26f38bd769e16662272b6f52500cb85e4f1c7892d1cd765ee83dfd03da7af01fa87356a52cc2d66a40a3284ca018ea32efda15803bcbe01a14c0b7adb08830d7073ddc8ca072df6ff8f8de6da6e04723d2d18001532b2cf472392782bc57739131adfb94e8ded96282aa26de34cb472e52161aa0c682bb873bd6bddf012640386b1e49aa66be5e5490f1fd8343c193c61303163214d79340fadc02c54ed8e2f74961cc9a410cee38c8b6cdc70a9b7aaa4a71f42296f9260aa92af8d1a668d0dfe22a3d33851a03db97b129ce1236cead950cd0d8a9759bb43c4127aa99bd27dfacc669262d6a81bc8a9a79e0fb7e775926dfd0383d0f6ec661bddccba11aed87b792b3f759c7b8fff8157435196dfe40c9b6c840496921c826688987fd6dc551a5b7b60eed1236a6365152410125217c6b636bfcb32f3feaf63afd76ddf9ba96c2e7612fdfe91aaba6de6716d7329a3ad721d6c1b771f5ac6de3919591078f71ee2d9b28da80ac47c92c05e103b581c63bb76dc04b07cae63279e69a8eaca40a3e84210e8185bf4d5f9e48f08cb9aa6c4d70e79ecc306883bc0bde603152bad53f23de98d6d3fa3a15fa36e4355e9e25561418891c23e6008abe83b00206f11d34856cb58aea3b4cdd4a5563c52e198d62ec317e6004f507df553a7fa2335955a6ea2ad0199a5553a50d2bf248a7fc3a69aed397de8fac34fc8df3208b05f283bba178f505bad1ee0e0480e461fec84b09932495c41af1b515229e5da61b19b7c28d1b9b25ad897e5746d703b2af10716511de968e6aee2bba604af39c9f577e732ac6a1779892c1a1a641a086a300a17f7ed2c30038e2df7525ce603d59e1c02e62f840a21ed41dd7dd35e2a24a65de8d67bf6cf650df9484c62fdf5cf4d4293a915d998322710a8a5ac687b379de93e454045cda619fd30e164cf879bd91b2a929fc8810aba0617c9a78854078758ca6bf2432c402c86c743d7cf23ba8f0cfd251a80068f68668abb09cb77c493444334f263338467176229b29568a056684acac97983cbe5986f8ddd97e4135f96d58bd1d3ea8addb4f30a7d379ca2a9f469b364915a3ccc875ebc955febb06b03df4afc30fef2cc47b1806d5274d32deaa7547c7aaafc7f689663ff0b19374c8aec49365c411c061c6bf7ef170c1da8ebc38cf370c00102679c53340467114f87d5e436204b0e65ef47f7d71e3ba732bb73433752c8bb838daf4e95be7ce3b9aaa77f6a241aac4e7fa856164334f679c0a954475ad7e2df715e5d70831047d70408da68e11c8c20c684588d0a3816e10a17a4683e446f50d46b2752d232a13f768d380ebb4f906570d440d300a8dcfe963b942e8feb270499299791e7fa8bd6f2c873f12f30833dcb9e2914b2b63205473c8555da7b8f794d1156a8cb5103471b4f5934a63c9a5421691d73d0ad1fc0b39913755f312a2e8f04a668c08d86850f55ab3c065398acd52336e795704ac23e5c361654ef92a78a2c56e6a9a5666c04097a7c527afa4cfd5dea1bf93e4edc96f99ee647f5e661406d4eb703918be14f86b0b67159bac452306b953cc4c6498b41fd73868be82d46cf80062d3e183be344b58c839467c6e4dfd92470103e7f35d379292c8ef33423e415c6417e260d9021c73da04186d58b17530cba5d05cfce36a544806a95a84ad0e87285747810f8f1f4d09841c28d4826c80d66a7d0bd425cbccc18ed2ce232feb7af0d255f2ad77ca79aede4e9105ce58c8587b737de7aabee4d995157a3d6713a819fea442b439c7ccb2380958cba3e861620573a1e61bdef21c5b0e6907bfb00a5d7d824688b2f8b5691af5db0f5c2dc658c8b1c938224703b4285bc0f37803cf25f5a138f05734e9949e946ba19b3deec4f4a0bdeb6ced2f4002e6082ac7b2b71f00c8de5b222cb62c0c2c39b644aea7643b64b704b02eb5210be2632130ec5bb70fd2fca28d63e2e6289482fded73ce27af05c02d347c130377013c05d48ded43db75cb96b7f09d57a38951fa02bd33cd26f1701d11d1537fda143fe61ee5b6773db9c9da5b27cd58f9ec084e032a806be3cb723943c39579943c5503c86cc768a4a617b64c1c6e0e6b53bac9a9904fad3f3af2fd42bb40272d0c45a6eba561f95df9e4bd75504cf5a15721e283efe44b9a6db4e32e7f", @typed={0x8, 0xe, @uid=r9}]}, @generic="e0b41b8b3f6da8d54c46018620f5bf6259f7bc5b3879d60a4efb8816f5acb9ad92914d96293db606c9a4d4291271e100389209a8291ebc9ff0c1f0fcd417ec5a82aa3fae142a00aa3bb03da3b4ad5f64ee1a5b95b0b6559e65b3bcbcf6e165eec931e0520c25c25cdd697d16c501c5dc413ab21cd112e4754c8128c93f3b2fa5541cb50a9d58ceed2e6ce6e40669891d39691b875962edd83982c3a1527df9326035167bc17547038c534d668aa7859c8ccfbf11aba3005ab4c86b8c9a74eedfae36fe9f96f80a06f5668f9f14f419b69644409b65f71c1c7106cab9f5c828c999529efcdccff10a183c921c7c44037b89cfce20", @generic="fdef800198ed90d4875d", @generic="869662c6bdb36adcfbe375bca2bf02ac900dc6712ec8ba7f6dcab3a33bef0c3699a08d7e234d9fcbca2f73865fca9ba561cc251769cf1775102e50d41c93a173afe8cfc6fc6d4337858610a2c49da01abe7158c703046107dcd7f4631817761c8928b925c35b54f5ad4e164e8368c54cf4a862b020d1093b0232eef41c4421bb4798c59b954c4907246268e6d26048efc1e206765269d19ee9b6973e3f444c7fa9894e49904855bf43dfe1dc1988ca9978afe8152b3c590d94be2398a003d1fc177f30ee9e8f3e372251658b3652bf4f9998b53dd41b5700bd26c66d3671587f8183dcd2", @typed={0xc, 0x75, @str='overlay\x00'}, @generic="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", @nested={0xc, 0x81, [@typed={0x8, 0x73, @uid=r10}]}]}, 0x249c}, {&(0x7f0000006c00)={0x285c, 0x25, 0x102, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x65, @fd=r0}, @nested={0x123c, 0x71, [@generic="31b407bb7c512d0222b6a349334da1a7702181ef3cec5ac0ece77a104971ed0fd789a28bd4c958f40e25ade6356d4f340bd505823523181232c2a22cb23be6e3a4f6bb03db7ad4f09e9e3b8c5cd6ec4be821853befb4eed7e15e7dd04dde2a14fa2e7270c95f02cb263bfb24e4ccd5e1df440b36b2286e40d7295674a2aa7aa20f392d60d6fcd69432f1eb85ac58e4af264f09f481ca8b1b5b37d00e9cccfc5c370cccda936d7d481cf487ad6335b6af8a5d3db15c0583bb15075b58427650cac1170984e4224a8ebf64d333cf76966d17e786c593d868dcdfac2af0e3d9452b46b79c5f144f41f05768b92779b8c6594ce2517b46445e439239403cbdb178bc074f99d0f79d84a90340c75fc3a6a21cbcd33878c5b91e7ec27eea4ecb868ae9f812ef9b50157fd7686553af7857b6c922739230f6843975dc80a0a1c478bbfeba2698dc77416eb0e6b9050824dcb9144c880cf3040d0241cf84202c3fb3104a797cc4f411253f2a3dea5bb20d5ddadada4ab5ef5f4d406bf7766328fc226bd737d32c6116dcd9c77bce4a179b9fd47ebd4aae0e77b559b44dbb321e1dd6d7a9dc4def7ddb42feb02fb79d36f119fa878632a8b23b6c674a5ef0bcb810c7f133589ca5e9854ae956b3bd16c6b8d688fdfb59eb301838b88bfd8a5e7663dc10c4428204028e32f4bdafafb9fc6a139aaa5290f5f611782ca04de1850077400bcf81b9dd82abb312da3a68fd22e2178e5859a5785253bc1d5c7e778cedf4af0d3fa1bdcc053641b3c042e2087f5444a7f718b76c1fb29a1a02c22735486dc892639171b15978b541d193c514a7f6278558d77c6b648696e4b0d26b260d074013ebc953448845310f25f872cd547ae05a806bfa6c01e06be52c11b8faa423fb6cb1637dd58ab9b8424e91a45d99954c5776ad3d5562852fee0b891efafc5282827874784d89894ba5f75389488ff40922bfcb6189df32ca1adf0fad88ea151b2df5b6f8a372113d388d865a14a084e5a8d17764d25812f48ac17f0932b9713378983629b9c22defccea7ce8100bce488c37134c7686cd194d50f57fbe56c96770d1b61e6b89648fc04995d58ee9362df0962cbe6b3a872f6f27e295c0409933e14f70632a5d749e4bdcc152aa5c648a1d2527288360de9f1d936d6dd3eb599a6fedafb516816ef48a726a7b4eae013421df46e3edf89dd7f8d30ad302d1586fe48ca7704c62020a3fe8f099caeab4aa5dd0be02cb0a4164b0d2a3e3c199da04c952925a96bc1760424d91656773fbdac48e24f5aecc0ef22e1fcf31462212514b119d451acca3f3dfd5c58f261fd90c97cf01816c52978c8d747b74b6874205539b3b8f559a0472f457ca6a5f9647eff5083f6ce803bf51a93004e98211c2efbde0a5a4c5e935ebbb068fca20cd5845b236e2e438317787a41aa6af072de2a5f1688403ca52c8cbca7d0892b6af70c4eef6045ed0a6f6cbd91f39518d9eb128604833d2a8f185718522e5f95c79162230dda95c9443962d29486620c80e39754e5fa82b2b1192d25dcc4327693efff345c17ea4ab27f99b95d854f07cc6ef0d03a399246599abb0b2333c08f6e4e8e7c73e3220c2a01f1f67be5f7d87bf99c1eaff8e8b07024bf525f3b4ac6216de82fce20aff7a485732620575c7aed53b8d3d5600d64f27824fc4c1e5e3d93d4997a9228d09a9a06387a3b141eb9c2e5fedf760224509b184a7b186e749c830679d85be95a8913606e99e060fc40e8291b4a1588615f6a1bc02a03bd56282185e1a666a1efa064a1924f745248ac7734fdabe26ae2f6ec27c1d7ff8a3ee3ffb360465bcc90ee2fc1ce2abd92a907dcccb9eb9a5efa8d0e2e42e595f794ef2128359f9d8ad052abae51032052c17b2cdad8fba6707631ec1326218a630772b9756c5ac62ac1eb2f82ae022524c017e33a570c5fbe0e92e0fb6bae42aade2dab3f4dfa33062045eecc81bd894c8fd488f17ca3737a15c7d373f6afb28100ad9eb49b6e7112711ebe6a2698992608898bcb04d70ab972080e83ce1a5cc81c376b0095d6d8439eeceecfe7a23cf95e7b531ac2e235193da6bacaba370934b0bd550d8bdbeb663ee504b16347a5569a8e3a33431f018192c64a8964837306b7738095c5642c64e35e20494ea216f6d1b849469a92b04af38c7a93ef8fabcd44ba9a07fe6a9bfa81a82064e0a91fb6c5a768101899fa14c1fa8e76e103a75438926c5bcc0a7f911d7ab90348e5e5d48fc5fb501403a9e7c72ef60a6a017c1cf4de50a125fc59c4c3f949649d77cbe5537a40d3d482d306676717bc3f55d2be403b0eef79467c95ab19024da90d91e7c3a818bdb5428d6020af6e45d4e3dbe8d24775fb148a8e094359f136469b36249d819126198168f3d52237db8ff35ccbacac697aff50fef5043487a84d2baf9bdfd8965be0d0106a89e877a9db0ae60d78bcb9e19736c5671567b8bcb1261cf11d2cb6f12c3bc4c426af19b403b282f01ccbec1253113fa179374bbdbf84eacf71a4c74979aac439c9d5c645458ac06534658ce2b13ccb90d59d82b31e2aa3ba77079088d7747cc05b1cc06aeff907945348ade1f86483449dd55aed00d164a3a510cb8795d192e0e07786793d4c934c0cb14becf68ab599983bd08849de53b4b96c035e5d08674ccbb0210b3c8cf20ad9433db11a204f73e49738d5d6fce87bb61cf7c8db13956712b93745234ef526c6e4c05e5d52dd5dc2dc5dbf48f536ad640f224ee6bafb043b2f7d2767d0fe4d974706fd70dfbc3aeef4a4e5edb5182cd38fd6c0875f1f0d97e52ff3469fc67dc98b17d44613d630b078a50957645765d201be36950ab0eb2ef8dbbf6c73b72daeabe1425f9d4e45e2d519405c9cd88b799886f0f95dcab1b987cb19d80c5cf706dcb55d1041fe5316a8a5bdf782841ee097805fd4f645f94790584cea176f5477dc052c64c2eaabb55fde23b2855f92128d8bf0f0f9f6160ad86ebf7083d82c1725b690fbc236763f00b0c52b543364f455f7e68fb6d5a91602dfc017f59ba87f437401c8e902e8f4ec2501b45c33c7b23163465b1445116e730e29e98e41111e2268c3c34aa4a2d1dbcc702b191384ecb234e462074aa48cc8d6b7c0b5122b7bb4a0484b408fcf0d74941a9f33c651c7e82adb7053e623a1f6a0e43bb0636867e27f5016f3e4ca169a32d8f0d8779a15d238cd26d38406d01ebe89ed334d39bd47fcc2b12303f445202f224a929844bf3fd1fac3c88113681ab09933b9688527e3138651f842dee63120083577983cdf9d28963d20bc784b8e5270c8dd8ffccb9a8917969a5d6b51005d196307187c712ecd31583987015acf13e1d635756c5e0eafdf02309b7f4d56961e445b5359d0de6f303bbffc005bf556065ffbc977da8148b9234b47bb46a8c5edeabba012a00fdc4b8645b95e05b547050abbe0871050236bbade68d2e6b9601efb5e21e631d9b9fe95662b951a5854f9bcce55203638af3b7f1790d2d05d4120862479cb877f12fd50b28d4b7f2e8fc097914e9fa4f59944fbcfc7dabadacc87d1143c29756fab4a73ac5b07734ddf5617f60f3e7ee6209610042156d32dde078f13d0a138df96e38dac373f23b24796f348d03f9bb63d42ca8ff360181cf09e5e5bd64c050ea39ad560f5eac4162476a80be551b7e7717eba03616cf0f087a9e51043620e89c11e1257858c543cbfb98d2a34b71862612ccea67f69d6641f607ebeb0ff04e4ffa93cdcf244f718706e2aa1525a26863b8f722a1312b8f1a34d88d40aaa0f5ad11daf79449f5b9ee5a0054a0027feb53c411e60e16ebdd3e8f99a5a5df3149c511455a0e463bb5578e0a2d38a391bf86aa5c0dbec5a95db2d804df02359763e2f2ee244c0b6e5a01d691621cce91f0b80dbe6539b72279420341cdb58f0d1184bf45940d1264dc8f4b60622354a5bee237e85185f3ce33fce0a7f3b8afbf0b3ca829d5aa8be2fb9d5aecc913f5c55d927e2340d6b34b3b7dce6cab99a9827c681bda6b0a39566c9013c4ec1b44e2e846eba9eca3b1c74f6ff254f2f960b33f0a4a8523e0a318bbf7a64ed2249f0ba0b4c8241164bcaac835efa4c256ee3f6ea6d34f55fc9e784970d5329e743e8d2186b51918fabd8862720b5e5c2ee21f75f1c68b03ea25e910b726c2b18d0d644886277b80cd4a59fa8b858b72db68146cbe6947a95624c3dd1b5cf2f1fb6bc01c46b6354f12031ca4173cd4bf63d5b178b28a665bcdc385febd17d7c17780deabef7526a3a00076fab9e0814c6447cf8fb5707119fb1a1376ea93af00d626940f47406c2b213c7efbde7f0042818771415ecc8e4a0ad799538298ac8d45bc124afef39aa3e3d790b70da6bc3466cc6db78d67894c148ea533388647809594f9dc11b8d7d6e8b6e703350d2407aeb39add9ced266f9c1ae5a545d072b4e5e14e16486c4ac7394ed5f69b70988cdc372d050feda3e78557f8cf41a52432c550aaa243d37c4e8cfd1f485255baf002348f785b330b2976a6ffeba9dc8b1cb24960978ddc67c11ab935f28b5578c6e8adf5015a684cf3d8938d25f523572ebe4def3b7e8b53afa0f48b04d42348de01ebb90f16da8305746175a4abf9e7e9e5063d1431aaad088df853a03396a4176c17758cbcca6cbbec95ba6555b934214ee3322353c6568030e6f85206843854df086f5a218c9b7b725df2d689e8ad38e61246f8ecbad94d10b4354b2b8777afc3dd20f53cec18e6ae5231928d9f09d802f7bc25c44cccc3043708e8377954fc0fa2a57e9b574ce5e94d92774e9570485c54717c15843eac626b4de285ecc42a64a5ec8abe7242f4521c4973508839ac81a295bf83322e7a9bd093759dad51bddc47cc12be1d3e8688e26ab05b1741d634e51cd5640420aeda3df66edefdce857c65896be11200476533742c99d9279c66f44daac97e79b0af835bc3159ae6ae1dfdbc950fcee0504d193dfcd906c1bc1c8e0d40c42ff27ec3fcc3e7af095615cb047b2fdabdad982e76090ac6f6483125d060fcb3374a3a05469045eae02c108a6350f18c9a6fada5f3c414aef97634bfa024b61057dcad7f8f0209125da8100e978bf9835216a71195b3f3630249ef2fa1880f6a638fb9e7254cea730eec6d1fd28671963666c7de17aef27ce6792a23a4b2ecbe07826e22674871f74ed8f1cfce95cf48a3cf4983fbbed07a317a0ae677efeb7e591526cbe3d3571a0dbca079ee5923260d7e43084004cbfce52ee751d524ddcb95f4263d6fe59fbe801ff08acec2b9c28a74bdc9c0e33b3f50b2b467cb7bd1d72bda3a963b29109c316504d493f95c976c66ff08a7529c6939cdabfec7a000688b1c6d4e6d61905194f6c4f1ac076874d0586925c2e86cc33b26085f2b9b090c417fc751636994603fbc31df1bd1bb64ff2b23cd936b8669420fea5e799ecf7ce04910a131f89838f6d7772079b03a90935c500ef433ad03f9478d164cacbca3315ba3a06436e789081ab507a42e45d9d71e7c4fa18aa2a4a7303b5152f6da38ecb696aed669b477b43b593292ffd4795982f5cb143dd259a487bf0416c6818a22f0e0fdb847ea58f2e13ee7066c2cd8973fc478fd7660f723e5bf9736141e6ff2d0827a10293b4550e13e8af754bf34187bdd73d0e733352ec87b45fb4bd83d0137d62817a26828047b165a53553a441a1f2d56dfae7999d6dee6a769527c8fc5e601cf9b1df04abbf6a9f3cbda5e1ea612a550b81dbda8936b2aa90e816b6d947f32a71b31c66a92c0a36de8967d1c0d89e4fbc6", @generic, @generic="252dc59a39deb0daa6295780204ff02ce81a0eae9d5d309729df2dd29efab3f4062db9", @generic="121f4dd2dbe2b7590f1292927b867a51c98a1aa96ffdddd239408567a1e17d241124c2dfe77482d1b8ba9ea1438275a79a5c8a72eb18adede8fbf957480f2b55070285ce1d503001b595568f0f4ad4a0c90276b1ababeca1e110e06f16d78f685026eac4e8e96fe39105921ea8aa54d5baae9a2803a522be7b05e23ce313c6b7869d45", @generic="820d209849dbcb947c0d4abbd2e6e71c9aa20e618e4a3fd4935a40eb112936c887557657d5018c788a0e09ee42d36619d578a2487f17a8a5f412cd4f153558db3dc784f5f96cc744f6e15149f28a5670171d47276ee9ba6ea8f6471f1f24d62d35d38cb0b61e8a5d07a0ddb882f9c5c0b9eefbeef4881b7639bacb7e048b707f6695bea4a00d962e45c2ed37e1353f9f1ede626e3e2e9c88c8f9191aed843dcf3c9a04195b572206e0a848deb82d6551b692bb16343d71c063beb83c8d820a230f85650874aa91d9a388a616f6b87b214a778fcce1024cb27b30446a66ac", @generic="0757e8b50eb5efaeaee49fc874668c919f1fe35888f9e0960b6b698504dd7a5a5d18ae97e1115d6c49ad52b1828f9a820acc24ae105d56b76dee48741ad0400e7be1f568fa76176bd31eb8e8878a2eec6c150e8de91ffc6b5a9083ff6c0fac69b7b62c3fd3d7ddbd6ff0411ffc698d0a0543caf1454405452db8796095f37f749234a17bc424fe88c7249effce9e700413b9341a089b1923eda1ac549fea107caf97efb9cee6391d4c5f1b3722481812d1bf67"]}, @typed={0xb0, 0x79, @binary="32de81cf56d5abb89551dd14e17e87ab5718bd294621f25ce49082ee080fad86a1a7bfa43142eb0e1e9356e11bba55a91dc2796b362e1efb5db5a7f3e8d19b337b598a215f5d89c70344ba5e13d5a97508ed47dd5056ef3214bfd2a67eb0e9e95d4a5abd859c0b6e883168f6db701c8b6843591205e0f13cb3744c3220cfd3bf9c389f23b4be5b32f7816f64fa20c5bde2f08cc1657ed1067fbbf9097dd071f9127e72a72d359374d126"}, @nested={0x148, 0x11, [@generic="23e69e94440d35fd61daec9b2a9e8da5bcdac01390e88b6048b18d2283f4c2ecbb98b758c9b335c7359725c57a6a8f35a68125272cdce480bbb8bf891ef816066274db4cea9c74508ffe85e097c6b9d37a666fe5140ee81faa8313c87906f0b9104353aedc71fd38b8", @typed={0x8, 0x37, @uid=r11}, @typed={0x14, 0x72, @ipv6=@remote}, @generic="4aed89292871b911ddc8c850fbe551c01d5fa8e251a5e50f0c06a234725cd0da5c9e8ad4e401a07c19618efaf65d6e2c406df579e6932b11cd4ccdbc96ba94c4598a42eb9cf11e372c0581260171d7623bebd511925578c439d841cf1a6e80b4645ac27de45d02983161cb3026162a803d8f8e2f8a7d6c908393547b7a8153e84297beb88dfc5df6674e4c9e0213912d01d95ca63188c00903795cbd63d2048a77819bbd52648392db89f87955a3ed80b8b0db5090672277404a38eade3f"]}, @nested={0x110, 0x44, [@generic="61b8fe177fac9c9e8e6f7d1229f8a5fc1b82b4dd0ecc1bd37a70cbd728b0d03818e27ce3", @generic="9e6e9ea4d2de4c160c8b4f811386d7712704497db5a44c8dfe42193cf3d01f2ab4df409c25d3a39893ad1f9dfbb47aa39e3141266afcfcfecd364dc426cf41605d4ba69a816ba2473bbe92d1e6047b02832289b0ce8fb0ee8a3982fcdb92174a6c4d731487d06c77c14d64deafc8751b1d9afeabba085e650c162898be4d823f870bd97266cebb4df2eee6673b949e5ce8336bff4c16e5afe99698346cb634c73475b88e8b4d9895968b030afa340a129c65d37c6bef6ab095c4dedb8f6952bf8480fe6c2e4b76010583b62e0cca741389e35cde62c2d20733d9b45bd17cd47658712a1d4ba7"]}, @generic="b20675d8d8923d8529eeb72fa04b7c9abf073d4d956795ce0842a662fcee2a3ac74e89fd0911cfc283", @nested={0x12d4, 0x73, [@generic="9c55d87b3b85e454b71693a362", @generic="9cfeea20389b1d9f83672fe14f6357159b69f9d2267ae1c6407e1d431fcc03aa6233746be8e03fddeeebdf8a0bcd6514dd8f15e98ace8c54a4", @typed={0x8, 0x57, @uid=r12}, @generic="0188927bc57c4f50a0186b6cae4b9bf58e28dfde12dfbe74074ad5ae81e9ddc4a9c1dec9dead51927827b3fbb6532fee017b8d517660557fa984c49b17b1047bd19646fd727666d2e4b3a489d794f94a0f1db61a46fde2ca31e4a763d0b3dd44374ab2a31813e75bcf52569a88552edc2564170e1729b719a89d1f82765009886a059316e2d0203fefaa4ef5f77d6b10511fde176ac5950ae68fc9b43340a42cea89ca809ed480c07f09a7b6470e70f2283a0feec90d10f584c6a9450cb62d134fff54c1", @generic="1319de98382237443eae6a36d285664121", @generic="faa9bc6108e6066b7148060653b7ffedcb2c70ff66627df56a5e5b44ba3617cccf6ee1a61f786a054278929b6e28d975f75f2799143ea527c3bdece74c4d9ee5a1b972716a36ef852a85ac6129174e85934052cfe240ab4400528e7be14366b1ec7eb32ec1064be8dac48ae725ec214612fff661cdf0edb4e0fc1d316e314abfbbb1705346cd4fa4c2f3b964b1867ed7964a38ee71e39333e60e1760fd407f3bec32bcc1e511ec988cc6a5b504b23e33aa85804b3d927ca2f9ea5e3b0faaa04013d4d20cd46210a45e16d7f4e080e7944c6a624d6ea1fe13addc7c374293863d816aa3dfecc69e928018e758b7acb7f05c4c818f05a58d857eb05f49b15f957858405f84d9a644393e152cc93d0fad317a4933ba6b19b5c9ee61a26399ba230e105ddf66ee39248b91c037d6803f1a6c84e5028409d5aba4a14163b2d40a4578f85e8f08e97796bac22cb6bf0dc72e642520d7b69136399ae85efa17490a562b747e20dddbafa6c0228f677705afcfbb56a0cd0c6f136982de51600f28073661d0b160ba62568369795d4c6ed1879db66e064d65e26eac2db6a1b12d6bfb5b2c587f27fd9832c15d11935faad824f37af23f62abc2609e3e0eec1b255f8977d94b5c8afc1cd4d8791570513120c34f2917a7cd1c1bf1192aeb5cf9a126c5284b650047a785b953a12bc1c4d70695e921c5d6987f0451ddada9aad0000155cc3966ad550af90b39a4674ed09f395cad8a6fd5ab6fd6f9845ba304aa37afcdd96165baed5fa5f4e43567c2e162e2a262d9551eced18e284813559fd02c5a46e960793a1215d4082a6d4cbb5277cbb2a27e9a30a3cdb654ad6840296ed8410479280ee282df9c98a1abe3ee644dcf48f72158e47e873f58a5101e7dd421ae1d7c9f293846ec84da18abfb70eccf38017c2ec1f74a75f9087d4626664498bb6f6c3e70e177b79cd1f4d6b36302db45ba81ef6daa4f093d4477c2afa00e41ed3ed6e0f8a66e23b10d49790398d4411181cf89d941bd57ed0988b97632a2c0636a830adb87fa14ea6a96db1ea4c1aa28a49cbe959defb98a18ec39af4321c11885d1d55382987d91f1e96a734f60d4b23f8876bfe7f8939d75ae338ec68ae04ada9cc05e42e17fd2e69de3717af98bb7976126ccc7085b01a3089112e4f924f569e0e443f8febb982dbac82b3cf788d9123745acfbc918bb628da81dab0504d6612afabefab47d74fa8dec7d6df2abe8ef35f471419cedf95261900c8552fe07f257087f374b6cc063e337d055545461c88a00842cbd50c2307eb9ec5e23c1d97e7a758c500034ec8fc33f73dc25515fe9d4925f479709eed66cdc34ad7b4ce69be6f56e8e882ab9e3059a52171814f1bdfa2d80c6b2dd361a9027cb63a8fc4947e3a03a3afc20ad70720216c2a073470021f11028eddc8396984c7cd0d22da583d1f53dbc9a87ec4b75fecc0fedf9e60b00c415b52d5bde2f2ff7568f74bf5e2919d4d349e4146776efc3a4e0f8aaa39904b3672c5ffc71eb1188406b1c1f50e0e2c726146e8d1454443453d7bb00badf8aa6bbdb78020c76da6373fc3cf8dda54c9df20205c224f506f5f7ee4b3f6083eb9acf6a6a8b77f85631f128a4a178c1519aaf5fa141e2dd88c952eee835a16accac274e09d994087638d6a182af9b4b28033b97419258ec9eca753fd5ef737cfc15a5301eb7889af80468e1b46755d912e375e12734a190824fcb99fa4a95debd3fdaec16c7835ef424172639c6326d5c2465c7b237b84fc68c97b833e1fec575a49885aff5282ab798685a5b5be3b43f91d388e08aae776c4bb07fab17e726733fa08dc6d8cc640d259fdb50db38bdecf96a83d9df6927a933902bd185412db3f21690a0d21ef02f65f646a05b1526a4df3b6240496707c7302d011544c4ed9e776415cef8a6018ef4777598d3858bb4de28535809f3f5e04eb3d3d0ef38661c0b85eb96a238d32895bb81ce9619fd444adcb1ea3c7214dcc8aceab35c38dae81d62b7baa2e5ea6f9bad4c12de9f814e0fa52509a1074fd1a275ce2a5bc1d291d5ff04affdf4e695bb767b43ab509e76bb105aad92b2168776715b8d9d568bcd842411ce208603208ed41e97023dece63d772559d62b6695c5796c7b9a8ebc6ee150231775683608b3eabb790c5f793a02f498ba9c85ec6a2a758dacba45b8469ed96b91cf601a54a1f82bcc92b3cd1ce2ce28b77fbbd1fe5f3cb7ef429932ea6cbf1d6110faf94e759739281acd24ceee2c12b04e4290f2452797bae75b3618b408293ec4dfff544400002ebbc895e3dc34fe9dba441c005b03656f7fdf8650c99456ae373923ed36de27932e18513aef5469fffe182796cc75b32c722f1db1ac763bae5b28839d1c33c909033c1ba10e32d144cff7291fc372694cccbd292809ea1d271617e1b3459eb1c707010d7084d804c7d4f2fadb8caac2baa42f3c3946267ae5248a0847789e16fc065ea8267ce3c653b1fe0ecd737dbc53386c09980d8b80ffeedfa29f6b66fc1b17e6b7c0a97892b5706106007ef2c0aaed885c8fdf32125042367ef0d20b29f50294589bbc7f009f335fe3691f3bf2766170710df6cfe4ef3adeb0f51586757d21aff65650347255195fc086e62dca1a26df43c86674dc08d979fa295ba082f39d9b9ac8ec3ce9b4ec3c4c4b04c3ac1716e23cd58369fad76a1e51419f365441a73ccb7fbb4d6e35175ee3567e62afacd55ccc44507ff53b1dee488d8d13150e4299d3fded0eb7841563f0b4cb1d480dcef1db92062400c9ebd1861e96380b3dd2587108505d43271b0cf73066196fa0ff6e1e18f56f6ea700a71a8f970e7958d4a1738615f810b7573967d0f363527235e046c589349e69389c6da97bbf8f9af2babb193e339521063db14414399158dce9778dbfae288fa956f7c277f9366bfa8bff189f39e0a40258bef4622d98c64b8e62dcc0cd4e2126367f713e3ed3f4b34d57ae841c28ba1aa173756f8101100bde1dd7a7734be7bd4f687370a1a6d77aa01a45bcff2e788ec6e3249ee94c3d3856e239a157ceb8150790ed432f903ecbe4fe1fa3ac217a933b1cb17d562696dada27383fd9ae7f2f11ad58edb88ac97af92bba716330437eaee18db524cdfd6a78b18805164d7b6415b734b4cb4c03d664d4b7c705c2bb0d07d2e121fca78a1c58a93b9ca70c7a613efa2e0e8dad9eb951a90d6d5e6f6cc0283ee7054a3beb87f15220fd51a66be0dbd78303bd6d56af508255f85a796d6062bb301ce40c5c571ce2c5035c5aab38e8f0f6e3c6019859ea5afb65c476fc81a432846c39b4db9b36c4463e1a1f052f0ba03793792a9e25f3b4dfbf8621001f3503f3effb910c61bde6653a041b169abd41dfdc6b9d19f6c39ec64f3928bb49c350e766304c9360d630fa78cf4f71af0cb7b530c8de4fd290f19eb9a2f70117f871b02936a6f1af3df1f5ee879c5c5843313238f3d44746d131776cb12ec7dff0979385b8d2b1a8bdc1912f4e6b0abc78d73d2e38176b9905419dc4eeca3ab7b060bcf860e363e513395821c2dc2cd95f487217763d4fc6e8d764880bdc23d944947890bd3a82fb8596fa8d629a8c5b08b5cbfb1a597d855bef402fb4d6bcced08fa2a14cca3b478ae3897af923643fe78052692721deb5c9243323478376b8301956105367000777034f6ad36c76a49c34ca93e691887d0fbdda3e4ed2763e96db949ae5eb607f6cb93e135def5a9c8ddf7eb37e9684c61dd62598cf2522544b0256196dc47a026d505e7478c8d2124085c8e19c9c461f60eed034597352c96d011ae3c88f2add346db16c07c31e38976ab0eefc2a593f06ec75121742b7feccb8a0b43a04e02663a8d8eab899eb17486408352c8f4d51c3037e905dc6f9d1a09c75267a7550c17b3ee2f593a6e041489ea3ec889fae48e432dc05433d6f68f611c6c83d0d172aee20163d378a0c35869c82301a87b57b263f085dbea6183b3d966af0c817c4f636e3f4567c303ad18605436eee50a19f1c42aa8e3db4316b11c8a24e10b13e365e05c1da2fc2e4b4b25e27e4bdf22052b08570aed9402c9ee2843915ced2197ad02fba2be5b9b3511619df51073b9bb002c2b2988ccb50bc57befb63bfdbeea1a9e2da81f37b5e0a4442e51d1a061d645c68b523eb74497645c5f2019577377de4a62ceb535ea35d6aa494930e67b41e92132d388e08e3533b8a59ab80088c17266c267a2d2ddc7440ac950c5153faa3c42af8111374e2af682fca3981c0ef2382be7b4de0ce75068856cc3d05ca48e1b21af785ed94bed8b3f9c7da92794fec39da2064a19f96b3992849ba9c8553e95b658dc86bff69fccd1a223a03cc30723db86e56c9c96390127ac4a20833b1c937d4a8e321b7e8eb3143fda4515136b4d974636d6a698d91b483e0188b6078260ec38dccb7539b29492befe51f40eea5e9aa12d348669b3453ae7f546e4c577569105e6e02a18884e0b9bb2c1c438325948b3cabbcf10b373da92722859d90b7c5dd05220569348e239b5239841b0d9568acd3898f6119e5aa0f58d9931ef4463abfe57bbeca9c3938fe3e7a7f6ee721d8d0278b28e8a47132ba3dd84105cfa9ee4b04f69f5081287696c502d0cb5567f3239f70d9e5872335301066d5c8df4f1252f2d4c03298e207a23995cd2fa77d4e6487ff480bcc554263e7c305ecb955d8afec37a6589e626b3adc83be7dabb792345046615716b260d5504eca501ef375bb48cc1cc39a032d88a03e1858f42d081aca3b8a01f93089d52f854400991ae7b679a6aadad184a27b4c1e26a38a66472400c557c38822c6cc5b0a6cd4bb15e5f107d17a60a1d8cabe9e476c33438e595e66db9f3c720f8a2427a97cbde29f673f19795fed5c1c00dff838d3c3d4efbd87b735e4e91de6ed4b80102ca46dbd1ad85aaccabb00fb69e42427abad98c476f5ebcb34711bb253184f46b61a1fe9e38a68b45678a4fc2f2d1efcb32fa6788cc9ccf772fe5bc66a5cb3df08ee2fb2d0a9468ae5235ccce82832a6dd0d46c4f63f3d4633648f02879c3548fd814d3a917c9c15072c5e08e09b0e68cc9104dfc1fe291a6583cdde0e01472ed6b82070e28b4564ba43067fe12a0fd20eb974a0b1f108299b92c9225afac6a509603aa747ff9fb7d048daac2a50afc1ff93ecd3f5071a1b46408d6baceb36e9a4798ce5ccd5ed6cc4c1bf563de8065fd69c46f9cd5447d19adef1b4538e60a77b1dfc7b62024188928728a45287c879fab272bb14cbac84e3ed7e11a0e0f883984ceae2b24a546e8880136712dc319f501a4956672daca31265f053aae9389374022202d4d563ed6cbdf6fc6c0e446b89393fb375203524a562b0e1a55750a39a44e76b5592ebd161a68d7f62bd9637fb1584985fa333d6ecfe0906dc4101c5c4d2538183dbbafb10cf9dc800c516b5b6e4a3250ab807c5fdab9d91c31d73506d9b3bf22bc6f5c96ae7ab4374d40318f92c20149481fc1f4a41673caff291e49bee0987f2a4c6c95b3474d0c5939093d5b0dd890bcfffe8c29c9e1c0f1113b4adb9e9c483e13fc174e4a3f9a5896ef4664f311f191c1b4ec4db73202c8e37d0b0f490bcb41620649434e21f3cf3cd79ff6f4a04952c3dcc8a8cb8b179810d0d7a94cd5a718e72565fb571218dedfe1e2723b33107b30fac3110a2d9336ee69e730c2f2f486ffe2704b43ebb124930a4c6b7917b603bb1022adfcd802093b7c0296bd8a7f28f9a9512027eb0c19d9024666e34a4f30dc7cfbb7e8d7acae2cdc2dc69d39f70ba4ffd", @generic="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", @typed={0x14, 0x20, @ipv6=@mcast1}, @typed={0x8, 0x7b, @uid=r13}, @generic="dcaf955f6ba0d95c13ad6328eeff24bb95050e8943a7e69712c0ed844d250f84b46c677f6a59a7ca1f0e55450fd33660af228bc13e94f1b0f8e04cadea9165a75d41456236db812afbc9cbb237c183b09372b849f5270c6de2b2b3b2689c2b6ee77b81a4c371b876668bf0853785fe05b071ce9b5494a67fcb17f9070a47dc1ffb3493ac86e775869af06b2e1cd0aa966f88b8c3"]}, @generic="1ea6ab"]}, 0x285c}, {&(0x7f0000009480)={0x2464, 0x11, 0x708, 0x70bd26, 0x25dfdbfd, "", [@typed={0x4, 0x3b}, @nested={0x22d4, 0x72, [@generic="4ed04203fda115f6874640f6997ae4f57333f4b2a10c8fd7484c2382579afff4ad60f3a8190e3c9af5290c5508abcc456116a23e52ee8dc75b944010c0a751dc86f27ae34882b7e5e501deb57bd3417baa143e9d45ebb533eb23a00c72772077859d9ccf10f1a0f83c18f52a32f8", @generic="e4dbbf97ebfa121abad810d8a5827197284cbd9287ce507f69413ff968946aab855a817249b652eefb8f4861bb2f203e2c39062560390a0bd950bf5a2fa088c17125", @typed={0x1004, 0x84, @binary="b6d26fb48426679b17ac38ab927227c8cb460a34c8503239666ef524a35e34ef979f46925f60ebe1b45ec065c4b3dc7d821df9d5b00a365dcecf3f96a2450e25775160eb3224242fa71fefc62a339eccfd04ca84b308240526e42297eeae025825249d8c605412bf64e33270fc56a38a4bbbd3619fc7d36a54dbf9d5af2f09d898ec654a577e3388c5df39891fc6348e626b9667d87599eb328f69588129cb281ae7c0fe3b295e2efe0ddfa43b7387fbbaf370c755843c250c73bed562d831f850554753c524801cbb80d7c2af1a44b0b201951efb503bbcb74364568ef285e6e000a62a9909a8a681ce6bbe557af9a208854e2e937148d95bc0e92c979b8e544ce098680e1e10dbd1943d8d563f1e6ff4e0ce3980375e291fc73fab63db684ed53929bde77ab8ce64d55671a54822a5a80e06d282e49871dfb90f31336007712301e810cfb8147d3aeecb742a4eccf59bfeec50576141f5da3e8e777fee5500d01cab75373451191b04d5e8201b99a6f972413ac6471cb93b1c212439cf793fad8ea18342b25a42645f59aaa126e81b7d8dc133336c23b9a1b2d05595e78e554ad1b966aadc733b012817b09977c2450d0f5af3f3eeca6abed6562bc8becb22fbaea1d0bafd9e4a62a668e8e1b7e0dcc495b75df504766fa982dc6b03c0daeb028f888899de99be749d286535446e58285caabb69374e945cb5b98f5f62ed71c2800beccb62823a7954fc0122c2cd87393b237d43cdb6fcd5e3aff7656618c3f16578f6863dcae6f77047a8eda3d5d0e33fe4ae1868ed0285b7c35201eda9ded5c84c320b8809f8abeac5e982f3ba3712abc359361823015d86ffa85cbdc182c80bb27177befd58a212e921eaa6b72147db5073c56a6db78711287947550a31463f05a09bb228d018fb82e5d8164cfc5ca663518d78102911a3f5fbefaf4c5f6ddd79f457589bcbd89078fa8834b48c5914556d6fcfe2991f23bf065e9ccfe769aa9cba4805ad2f4ef04653826b4817decf1041978e68f2265b7c1717ea9079c829df0edc298d3b4ee20cfc31374f3c5698f761fe33cacb4eddf6a98e006c883fe85ae6e4c7654da23b5af503e65ea8653348617007888ead37295eda53ba1ddd808ee8a1c4ea717cada55f12aa17cbc587847347c1fa822a5bc7d59b7289b5d08a6a7db8c10f6ed1f17619cdfb8fb26423f7e0a4546165b994165c8410470617ab14d27747f4f4969a1356e87b2cb563974533a8d6e81c20e2be4dfd52f58c5b709938ee7e38d28dde82cdc16afbb33f4c11878433240889282db646df8770fd44b7320aa1f64a17dc18204abba4e85d5a2ed055994d75096708f8e9de3485a905898da1c0e8fd9ef50ce021f742c85aabe5620265bfe84c6f158022fbabf6a67f5253f3f2d0cc5280061d3e00060d07895c137a00e22eed1e37a2e3c08d990d10ffa13d716ecbf4658e8f215146799899dc4ed4af322323f86722b4ce0959570703025f0e52ea35161f0b16bb2f7eb294de84ec173393f45918a820ec95195a4d0f1d52e0806e1f52c1fc1909cbb1117b46d4b506556b248b80d67bbb6c5232700fc343268edbbab596391e529880423a2858a02e43cad8459279bc003e1e1bdb8dcb7172bce08d678aabf0d323d8cb3f1fb1a1db81be8a503083bb6b49d07c8c7f1d108e2bcff24e11afa900179a1cc19eee4b2da353d0178575dd0b3e6df310cba68f52f2ef88f389f29ea0ff7b61fa784ff70f78700fc66e54352c2989085f4b80152a35d8e4ce54ed966ff7079c0ad0dfcc041be270487cf5cc8b6074eb807db46b16cbbbbf6619bfd6984ce6ae637d6e70200a8defb36cec2bf039af243554255482de80136a4be98efde5e72867489a91c7017946b12e37f6a635f7a792a2baad7952827501554ae06f29ecb251ae0e501dacce4c16fc50fc86920a9a6c612b9c1a53f8a67f8083bcda63d2857ad280cbcbb53c13e414708cd9707501d122c91c8a9fc0777da5a423d3cb04a5a04fd58d6bf5e63c543d261e7a89f46236bdd772b04a52b0016afd7e4b1daef4746d247172f4e46409aa96c0f0072e4530931635402239ede46d6df00ac1a1043844737d776f13d147418645932c5aecfa3266cd30e2054e929430bf31e068d61ae7d0b33933be0012849bcd1ee0f54c543dda81c24e33bf8868c6b17173bece1a51d24db98cd423c75e029e0b1ef6ec37f01f2f581ea983fc948de46eb9935b0997568a136b2bf029ea6ee439f38c667bbb3c8d629353f94ccf6c37fcb33c8003a61cbb90a840a1ada3390a6d0937fcb1f3ec7fbee9a034daa51da142ff2ba477bb35dace3e77f00ea23552c633bbd9897d318e1db6eb5232ef2a2cbc572309df550fe0501d94198f26c591b9ed2652b5bda2b60dda1539fd50562fe92c9b6fa80a72dec81b6fdd30d7e6b8eb9e4f1f0337b04b004daf9afb42c9e8587149686d883344780afa7f805d2a6d2f28dd7d9204b5e63a58fc7a5cf23159696cf89a0babd3414eee6d567f154f9b08025cf55537f75fdf08250c12c12d9ce4b9fcb7eb42890825151f4b44fd46d2efde67ce99c0e1253fa915c7acbafda29d877ff06486e72fa8c82d6ff250caba0df7c1f3a789ad81bfec4ff9451681dedc419096365b8740a844049c75429bf797709ebdfeb81133864c67a6ba6d7ad25754b79a7a20630d8a4cd853a0c7d10ddaf22360f99c0fb7b94f52e13cf8303238ad5c2321230ff89097fd9c8069e5d061b3ffb6ab9a038933d293956fda0635bba59f7800c30ebf62db272b354e4ddcc2f3c607d0d4a68d32c0c2ee5eb494c01cbd23caf183027b013c6093af6ccfa259cd721a8b37a5bde4388278242581fe3933ce7dcd679121db219450b88310ace25dcf2e58e31e848ca19f6ec17d949bb8b7f6d0627aa96954c46d2fb7a8821ea312fe2d4a0177c92b5e0303b8b1ed509391e39f130d3e5894537b5c09330091cff8737922cb541711ae17bf04230ffb9a76cddcdb783ce6b47eec627ee0e4a0bed18de4d311dd498fdc038c053cf30d6a553fb80fd005cbbf5b702f05bd0b86f04d40ef8a994fbb2b33d0d5e72eab3fc76e4d2df84f272222e43f7bccaadd6a25c413d7de5eb0718ce490496ceda1e2849d34035cc855943273734038a8e4733ff2a2506bed43cda8021002d053ef90dced983dc305ae75cba9b1d19093065af4d796ac4822122032ec8f9383d9988cfa7cd651709b17f5db7851119eeab63aeb6085833b6f1d9ffcf05a91a10eb2fad87dcc7838cbc1e69ffb7ecf46a836803908d6f90812c6a9b7035e68728191da90ec7b6cb57e46efd426de8461e31f1c78700e75a4c8f478b090cdd84f3a8d69fdc7937f25f60da3067e0597d553be18fdf66b2313d3d71ceeda8afe24ac7cc859bb8878275c1a025faf27478a4b0ee3ecd224d879f0f54574d4231dea0260a90d6f3ea57671c8f88458a2c226b1e9b8368962f4b6a5d1e70f72de84924e88b9abb65a4a33659e59b59080068b07e43853225b33bb6efbdbe09a1a2eaeb37a3cc8f78d1c70cefacd1a8156b0caa161ca82004d91dad2bd68c41e8bedc9c0c53f0750fab8d0571aa3b72f8910fd68aaf940f93282ec73254bc86e0ec0eba42072df8bd98647492e807b231c90e0eeeb75ed9f859c4cdf59f3a762e9dc84db69533d5cd3c77d0b8ec7e517970dd54223eaa8030706a45b3c2b27569e02a9e2e1595046eedcdd35eacf9945e1865b60e770c6ccf5ec62437a9944a5edc7156aee77cff3c7ce9ebc3d2ce05c0942a7a6cb1fdb58e8d37a9e25466063b2e0f9789ba275cf7137e6b7498a99ef302c50ea942fa280e96070ca89d9a69c18a6e536ad832e04653d6cf38b8665fcd45c6576ef478b399a2e5c10af2e35b91d85437f154f8d92db6a03c139ba3751c91febb9396a8a08e717b5c08a2600ea563edf75e12839d02d45e101f5e04d04995897a62aeb031b28d91781c8a7874878f5fd9e4b2f9774fc8e4a410857be3caf4769d0185f6581dc44748a17d7838b26ece3d07ec76285dc48a2fb54259d583379708b355d2bd4091be9902cc0b375ab1ae76dce1e667f5577a2bc5117a479683ded601ccdb9d5ca294bfbd4e6c0f3d782940e5abfed93452eb824291a94c375346f4bea2780a6edd0e06466f4303ec57bc338815b0c56c59e52c08dfa6c3fe714c31895141383451500da2ffa1a67c87f67dd5491f635000e577e6e8f58ab33eefaa44eaa7a9a277910440f7a60effaf808e13e480214b1c18a76120edd5d00a8d151630121b16b555af907ad8e5a6eb4224c6346dac8ae5d897db80e7fa3ac7df0c82e18b19bc5e4ebb2e804522b892ca72060d6a15e655b3eb5da7e37084f04fde2d69e51f3a7b7fc451de8f1d96a5dfae30ce157f29d4c136f573158d93cf08e459b01c7b016b71a606319432945fd3a35ca3dae258dda720434e3ef3c85a88392670e17990141ebc7071986b23a54e20dd2fc58925c1173797b4f0adc84b7718083485e7330910d1118d17c7ea0fa0fd89e2784536d6bdb6f2b4c0cc74c9abee722295f145d69f98febb5500b4290f6a471e55b015f234beaaac83ffbed23e04e4d1b5eec216251d117b23546724858e91b1e9e4268c5364d71efd66932a19fd40119a1eae82c60b0bc7371903df9206cf4d8d193e9510ca383a09dbf86be9fb67b05c7c3291e2813575fab974a92b39d4c5d1c17d932d776384d002788eea29667eb0f3c8cc16cede31037558e9284123264312d5dab7836ff5439bbf85616334e97e93e0a530d9d95581baf181b666f6dd4d1f5f6f8b81040b01edd81dda36520ce58d7ffa45b3babbb2c68328246cec1ff8313274b83f31ec55535f9a325fb6d377e34d7d09c8a50ffda31c96887f047e5cd3bbcd28c6136b629b0f710854536c9fc8e6e57fc0730dfc1b7e134088c0589a9b48cff254aa78f2fb8492ff012722bbb252aab1e20d16abc167e81313a0d3baea31ad9877becac75aa7be29442119cc48c12492a9c42a12e9be5f5da202f0e7066883aedeeaa29b259a40012b581075c16a9e92b3c9d9e07663fed9cf348723ac7d1809d96a2b00bde8545360248c6f84490e977e7f1983dfb2091d0e0df69ffc1fe16387ffcc16e37fd5fe4e81354169d82b8a580e48eaea86f1ba27a7a295f989b94d1c6ac14fcc82c08e395881f7097d9e1aaa11493dba70928fd033bc22cbd333d5a36b9e3c47c6d2f651d6d13f22bcb2491a0dc109fbf92f38732dcc42a1c81ea3ff3bca9d8172158ad22f20f95e4f2d733ef7a7adf6fad32465083e5ef8a68e15c30eb201c465f65c76f9a1c22aaf578c72c632d42690d2b3dc30fcbbd17379d249a6fdb4740cdf001b5826bafde3528eba04c682a15a48bbb326a96ef32f7eeb855e84e697b36a3ddfc4a8f22cdd082c9d8a3fa35f4ea9aa5839bdc08bc3af5d3d505dd9af4891f3bea0ea75f5c2a2252b448d8f77e27dd2f5221e708600ac737e8d6c7026f9dbf65d1fa8054e7ed5ec6f5f26e51ab311dccd8c0e5e8ffee8f5c2920814d34660ed21d7f41ec88b7c4a7282558ac465be0a62ff2a43649c9b058e3ef14ba6396abbe65ef4afeb97f9f2b3e47f038530ef24197819f414fd6445a90f516cb9716a927d5c9c603346f8f88d44cd759f03288c81af7c4048bdcabe773a09857614d5197671fdcbcee2ec41d07ec18884ec9a633896f1d304af6786be6f2b9623b0d3226aafa8d0094e8d32875994a0c11a855e0499b50a76cb1c2892256761922252ad0f2fc66245e89"}, @typed={0x8, 0x76, @fd=r0}, @generic="43aecdf5cc7168d3b37e24daad18ae570233675815a440c1f31876bb594826bd4b7936b19e3e61be827260bb2040eee5731baa3463798a0563e86577df95df6ae7dd22da4c711ea5c7f5ac43d34de01cfc91e81accf9c727e88c2203021a90b909be08545b4ad93136328c92e2eff6ebe8c7334098497b2d10dbf5678c9dcfee0cfdd0b71e28ffb52836b2f3da55ec973cc4087cc43e1ea3be3bb3b823a1fe285e9ec8405535e948a085f9161d503a675bdd6d874dfc067c4061894a55d3294c9aef2c89fad6ebb094f67d2fc3a19c6148fb6e871948f69179f52f9464036f24a9817f28c7e41f72612e6a5678d25830349a43", @generic="9c35e6c6", @generic="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", @typed={0x14, 0xf, @ipv6=@mcast1}, @generic="7625fed02928915b0d26f246cc175db0b4dd522e27b0d7cd6d63a1d90efd0a21fb8f0a583060f80e9a0cfcb1205eac571e1cd41bf3347d97ce60436f76d7035153b96117ca3926c06160956200461c53295c7df23b9e849160aefdbab7b7b15cfed3e4e9640a16a9980647d8de3cf39586827c1cae9b076e0a1ad7188013ba067a9cecb86486f03eb1b2c4231ca01df8b87ed58ebe0541f9de803e79d8a2b0f4eb5619463eb63f37073e503d8a5d4d0c873c063a7dedd03757e776ea209f4ad2a69eb710d672e4288c39bf43fb7d03102f4d97", @generic="53b79f7493f7673d2dc318ad9c071b2ab2192d4f587c80486ee4e8a70d58bedc620759c0931a179e5fc3ebb6eca677eaa1273550f57a"]}, @typed={0x4, 0x19}, @generic="fd815c94f0824f709144b5d369a42c92b0dd1653790445d72dcd1adbc71733fdec3ab0dee5d1a47b5319f486e7b802bedfa5c30a2f5127d92a31d5cb6d62bf17d4122a77a531f9e5769cf8c2179418c369508e600b17bd", @generic="c65f7e7d37b2064b227a8d811e090f8b24eb7d1a378e13a2996cbc122eb72d40c5ce86835779370d0171391017d7d745d6ae97be3cd2235e7b8c6d54b0b9de127a7ea14035633ec29e41486f89d799d1837daf7f389132211f6d91a968ec03d8318f9967365b02f62f", @generic="2633b1e1ca22d91447c2603442f9ff023caae934d72466f94bc1724f68656523aaf15456a4c8868a7bedd9d247949c9f771e480c038ce0592be92f91862f759be168f0e30ee2da74998259abb01a8dcbe15d64f52170c5f62865f56cf94756ea2afe4a07b71ef29321028940d977954ef44669ffb7959f9623ffa503075edda57626a9535a67267a89b15ea12988285a0f4c149e4dcf8f85f7ba9d784e998207a7c7d5cbc9bf6e198a336326aacfd2ac", @typed={0x8, 0x2d, @fd=r0}]}, 0x2464}], 0x9, &(0x7f000000bbc0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r17, r0, r0, r1, r0, r0, r1, r1]}], 0x80, 0x40000}, 0x20004890) write$binfmt_aout(r1, 0x0, 0x0) 10:19:37 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:37 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x501080, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000300)={{0x2, 0x4e20, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x48, {0x2, 0x4e20, @multicast2}, 'bcsf0\x00'}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x100, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f00000002c0)={0x5e}) 10:19:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000280)="0af51f1c0ce5895372208812207a17d19c215a023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x10002) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video1\x00', 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:userio_device_t:s0\x00', 0x25, 0x3) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$packet_int(r1, 0x107, 0x1e, &(0x7f00000000c0)=0x40, 0x4) 10:19:37 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:37 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x1000) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) 10:19:37 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0xa658d73201805c32, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000440)={[{0x0, 0xd4, 0x80, 0x5, 0xfffffffffffffffc, 0x8, 0x81, 0x2, 0x9, 0x6, 0x7, 0xd242, 0xfffffffffffffe00}, {0x5, 0x4, 0x4, 0x5, 0x6, 0x7, 0xb86f, 0xdd8, 0x6, 0x24, 0x25a, 0x800, 0x1}, {0xda, 0x1, 0x4, 0x4, 0x0, 0x80000000, 0x8f, 0x13fec0, 0x800, 0x6, 0xff, 0x416, 0x756}], 0x800}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) write$FUSE_ENTRY(r3, &(0x7f00000002c0)={0x90, 0xfffffffffffffffe, 0x5, {0x2, 0x3, 0xb0c2, 0x3, 0xfffffffffffffff9, 0x3ff, {0x2, 0x100, 0x101, 0x1f, 0x100000000, 0x6, 0x7, 0xff, 0x7eee, 0x644, 0x0, r4, r5, 0xfffffffffffffffc, 0x7000}}}, 0x90) connect$rds(r3, &(0x7f0000000140)={0x2, 0x4e22, @broadcast}, 0x10) accept4$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', r6}) syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 612.014045][T30582] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.021945][T30615] overlayfs: unrecognized mount option "upperdiï" or missing value [ 612.033676][T30582] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.033692][T30582] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 612.033702][T30582] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 612.033711][T30582] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 612.033720][T30582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 612.033730][T30582] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 612.112070][T30617] overlayfs: './file0' not a directory 10:19:38 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x64, 0xd1) 10:19:38 executing program 5 (fault-call:1 fault-nth:20): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:38 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x80000000, 0x80000) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000200)) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x0, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x4, 0xfff, @l2={'ib', 0x3a, 'vxcan1\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000280)={'hsr0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1) ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000002c0)={0x7, 0x4d, 0x1}, 0x7) 10:19:38 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000240)=[{0x20, 0x0, [0x9, 0x1f, 0x10, 0x7, 0x8, 0x81, 0x20, 0x4, 0x20, 0xadf, 0x101, 0x1f, 0x2, 0x8000, 0x7fffffff]}, {0x0, 0x0, [0xbce, 0x0, 0x8001, 0x6, 0x7, 0x6, 0x9, 0x6, 0x5, 0xffffffffffffff50, 0x8001, 0x4, 0xffffffffffffffff, 0x5, 0xfffffffffffffff9, 0x7]}, {0xc, 0x0, [0x80000000, 0x0, 0x8, 0x1, 0x401, 0x8286, 0x5, 0x8, 0x400, 0x100000000, 0x5, 0x553, 0xfffffffffffff000, 0x1cd045c9, 0x9, 0x5]}], r1, 0x1, 0x1, 0xd8}}, 0x20) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r3, 0x0, 0x0) 10:19:38 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 612.212239][T30627] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.238948][T30624] FAULT_INJECTION: forcing a failure. [ 612.238948][T30624] name failslab, interval 1, probability 0, space 0, times 0 [ 612.291004][T30624] CPU: 1 PID: 30624 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 612.300047][T30624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.310097][T30624] Call Trace: [ 612.313394][T30624] dump_stack+0x1db/0x2d0 [ 612.317735][T30624] ? dump_stack_print_info.cold+0x20/0x20 [ 612.323473][T30624] ? __x64_sys_mount+0xbe/0x150 [ 612.328329][T30624] ? do_syscall_64+0x1a3/0x800 [ 612.333096][T30624] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.339170][T30624] ? print_usage_bug+0xd0/0xd0 [ 612.343951][T30624] should_fail.cold+0xa/0x14 [ 612.348553][T30624] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 612.354376][T30624] ? ___might_sleep+0x1e7/0x310 [ 612.356415][T30633] overlayfs: './file0' not a directory [ 612.359229][T30624] ? arch_local_save_flags+0x50/0x50 [ 612.369963][T30624] __should_failslab+0x121/0x190 [ 612.374908][T30624] should_failslab+0x9/0x14 [ 612.379422][T30624] kmem_cache_alloc_trace+0x2d1/0x760 [ 612.384821][T30624] __memcg_init_list_lru_node+0xef/0x2e0 [ 612.390459][T30624] ? kvfree_rcu+0x20/0x20 [ 612.394798][T30624] ? __kmalloc_node+0x4e/0x70 [ 612.399478][T30624] __list_lru_init+0x4d9/0x850 [ 612.404229][T30624] ? list_lru_destroy+0x520/0x520 [ 612.409255][T30624] ? down_read+0x120/0x120 [ 612.413658][T30624] ? init_wait_entry+0x1c0/0x1c0 [ 612.418581][T30624] ? prealloc_shrinker+0xdf/0x340 [ 612.423591][T30624] alloc_super+0x8c3/0xa10 [ 612.427996][T30624] ? destroy_unused_super.part.0+0x110/0x110 [ 612.433970][T30624] sget_userns+0x164/0x6c0 [ 612.438369][T30624] ? get_anon_bdev+0xc0/0xc0 [ 612.442941][T30624] ? vfs_get_super+0x260/0x260 [ 612.447688][T30624] ? security_capable+0x9b/0xd0 [ 612.452522][T30624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.458740][T30624] ? ns_capable_common+0x93/0x100 [ 612.463751][T30624] ? get_anon_bdev+0xc0/0xc0 [ 612.468322][T30624] sget+0x10c/0x150 [ 612.472112][T30624] ? ovl_show_options+0x550/0x550 [ 612.477121][T30624] mount_nodev+0x31/0x110 [ 612.481433][T30624] ovl_mount+0x2d/0x40 [ 612.485482][T30624] ? ovl_own_xattr_set+0x10/0x10 [ 612.490399][T30624] legacy_get_tree+0xf2/0x200 [ 612.495059][T30624] vfs_get_tree+0x123/0x450 [ 612.499546][T30624] do_mount+0x1622/0x2fa0 [ 612.503875][T30624] ? copy_mount_string+0x40/0x40 [ 612.508795][T30624] ? kmem_cache_alloc_trace+0x354/0x760 [ 612.514322][T30624] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 612.520548][T30624] ? _copy_from_user+0xdd/0x150 [ 612.525385][T30624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 612.531608][T30624] ? copy_mount_options+0x30e/0x440 [ 612.536790][T30624] ksys_mount+0xdb/0x150 [ 612.541015][T30624] __x64_sys_mount+0xbe/0x150 [ 612.545681][T30624] do_syscall_64+0x1a3/0x800 [ 612.550262][T30624] ? syscall_return_slowpath+0x5f0/0x5f0 [ 612.555889][T30624] ? prepare_exit_to_usermode+0x232/0x3b0 [ 612.561595][T30624] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 612.567131][T30624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.573008][T30624] RIP: 0033:0x458099 [ 612.576883][T30624] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.596466][T30624] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.604855][T30624] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 612.612810][T30624] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 612.620773][T30624] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 612.628724][T30624] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 10:19:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040), 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r3, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4000000000011, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/kvm\x00', 0x400000, 0x0) setrlimit(0x9, &(0x7f0000000a00)={0x4, 0x20}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000600)='^trustedeth1^\x00'}, 0x30) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000000a40)={'ipvs\x00'}, &(0x7f0000000a80)=0x1e) fdatasync(0xffffffffffffffff) r10 = gettid() bind$inet(r5, &(0x7f0000000b00)={0x2, 0x4e26, @local}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000800)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) getgroups(0x4, &(0x7f0000000940)=[0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) sendmsg$unix(r6, &(0x7f00000009c0)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000100)="2e2ae7eda6b58ead7e0bcfa9d2a7876522941ffaebd8f22721ad80da4e9a91e36d89379c3585d8a7db14c25b5bfaf3e9c0ef6cc48be4c7", 0x37}, {&(0x7f0000000140)="7bbcb3797e798b50ea29b667fd88c27077c3bf18fb5c507f45e81ff03676cf0d41a84e80aa", 0x25}, {&(0x7f0000000180)="798e258ddb9961189af9a03fc8ab9397d5f5508c87d1a132a5ddb0fb49d94a1e31ece2a7f4ae8bf21cd9d228d2019d5186fea02b8ac856a8ab113c9a18fa1d7a7d44875e8a2bd7c0f4ef9a98134ffca2fd055eeb9c0a19735f10417394e18e28075b140e2e5007bfc833647de0166d75f6cef6a775bcc48910818e4ccdc97c9667687f70b56dc3b1701c73d7601cf1907a663a98f69efba1582ccdc1886d234b89c53c16f5fa631e89921f58bcffadf3d844d09d3cc7761eba56b326e75f641f9479fdcc2f4bf48cba", 0xc9}, {&(0x7f0000000280)="12dfaad8d228c8ca0e886f19b4748f1cbd3541c328503b84c614372cceadbac406f756594cc6413f474003791d62dd5708d1bd79d44198", 0x37}, {&(0x7f00000002c0)="ba612742ac9e2d719b98b6", 0xb}, {&(0x7f0000000300)="016061390d69e56be3d98f12c361fa8f92b326aa8191c8d7dd8a34c8215973fb7fc74e09eb2d38d9dba5ae67e06fb07a041cbfde1892652c907789b0e3fa0f2c74f6eaa1e60ec29bae20dbbbbf5a6018fca2c2340586acf4cc1fe071c0ffd4541eccb634841772e9bc4e254c6fed82ac9d09369740aaf8ed4a2943d068", 0x7d}, {&(0x7f0000000380)="2d4193289801e9569d469f06cb6851f1b3d712cca9209e14126bba074234c302622bad3f307f10d17a2eeff3aff09b78c9140b3637cf", 0x36}, {&(0x7f00000003c0)="6a36c1b6b30850eae3c21ecd7801574d39a7b54a68207968787d7d6874dccd85c4d823abff6c7287ce7e7193103c5cfb34223e46f27cd0ecc54bd223ef0a64bd2b66dc74c0198adef5b93a3b75dc3d819bfbd234ec9fcd24dd7423946963d855a3c8fcd64e45c237d4d9a267340a465168db1ff2d7c171834138c5ccab4534352c24f4500060e7f1d3290186671210e70a41023f0988eac5d60f849a864e8a4642b8b0b10fe7e7e9", 0xa8}, {&(0x7f0000000480)="11b681f5cd173e115da2a6c902aabed30d563f44eb59a0ac4b0f180c75f4b2e1a97d4411e767a4c114f01aff6204028818339afda699e99d0b2a53eefbcc4b72dceb9433f6a094c2635642f2526aea767394fdf1e7e8a3e6c1a69710348d9e1bb7c61bf24125009e", 0x68}, {&(0x7f0000000500)="bdbeae95333b414f62733fca221c850117186419d6aa3535653aa91061e9e716626deb", 0x23}], 0xa, &(0x7f0000000980)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x40, 0x40000}, 0x40000) 10:19:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000a00)={@mcast2, 0x0}, &(0x7f0000000a40)=0x14) bind$packet(r2, &(0x7f0000000a80)={0x11, 0x15, r3, 0x1, 0x0, 0x6, @random="12c1ba3fc440"}, 0x14) syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x0, 0x4, 0x6000, 0x0, 0x74, {0x0, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x4, 0x3, 0xffffffff810fb4e6, 0x1000}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r4, 0x6}, &(0x7f0000000200)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r5 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0xffffffffffffff80) [ 612.636679][T30624] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:38 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65fcff6c6f7765726469723d2e2f6669dbe94119776f726b6469a25496f666696c6531630010296960364d03ee01124ea0342c31e3d5c3e6ebd52f96b23a37ad9c220d1392fb22b1c9c629dc4c0d9924f8a4a0b6478b9ade95bd91f1c3af283e7d6eae5d2820724e650a924a1b0ae962d8005e5a298ed8545e0a5d817f916581e613584fd8b5be29ec6dbe8dc728110497934f73712e6939b1e7fd0352bbb4351f9e47372ce0dc01b731906a1056c5ce8a129f8a5c"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffb, 0x1) write$binfmt_aout(r1, 0x0, 0x0) 10:19:38 executing program 3: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xe85}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x2}, &(0x7f00000001c0)=0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x1a000, 0x0) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x1c, 0x7e5d, 0x10000, 0x10001, 0x1f, 0x1, 0x3}}, 0x50) r4 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r5, 0x400}}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) [ 612.675689][T30650] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.717531][T30651] overlayfs: './file0' not a directory [ 612.789702][T30659] overlayfs: missing 'lowerdir' 10:19:38 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x68, 0xd1) 10:19:38 executing program 5 (fault-call:1 fault-nth:21): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x2, 0x100ff8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$nfc_llcp(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x3, 0x1, 0xffffffffffffff00, "0b6613cae9c9751157a1376d86479f0f120fd826cf6025af1320fa8290c2dd8feb0591e16b0c92e6d52fce2f77c4e09789c4b5085ab568f1d1a2d3a967b132"}, 0x60, &(0x7f0000000240)=[{&(0x7f0000000180)="a4d98eac6291f2d463662a7de4f4c9e07930f76a3c201c949308cc82c852662533696fd5aafc1eae8d5e7df2ed0ecb84c4f46e3d052c67a7d0fa3243eabfb94a75c44f6f1dacf7b65bf556f0e3457178216ec86f2f68875d1fb340466d79c758ca4b507974a4cfedf0d225e9d353a6d23ec045c20593c619843ea89c2da1ae1d8c6fd6dcd5416221f15326", 0x8b}], 0x1, &(0x7f0000000280)={0x50, 0x113, 0x0, "c6930ce027dd53cee76dea4e3b5e79b9d6350c3053563450e5849e17a0cea4da554ca2f414597f420efd756746fd8173efe14a87d312e1fcae1ad3"}, 0x50, 0x4000000}, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:19:38 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x800, 0x2062c2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f00000001c0)={@rand_addr, @remote, @multicast2}, &(0x7f0000000200)=0xc) [ 612.822254][T30662] overlayfs: missing 'lowerdir' 10:19:38 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 612.869831][T30667] FAULT_INJECTION: forcing a failure. [ 612.869831][T30667] name failslab, interval 1, probability 0, space 0, times 0 [ 612.885060][T30666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.910607][T30667] CPU: 0 PID: 30667 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 612.919649][T30667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.929701][T30667] Call Trace: [ 612.933000][T30667] dump_stack+0x1db/0x2d0 [ 612.937355][T30667] ? dump_stack_print_info.cold+0x20/0x20 [ 612.943077][T30667] ? __x64_sys_mount+0xbe/0x150 [ 612.947928][T30667] ? do_syscall_64+0x1a3/0x800 [ 612.952693][T30667] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.958774][T30667] ? print_usage_bug+0xd0/0xd0 [ 612.963543][T30667] should_fail.cold+0xa/0x14 [ 612.968164][T30667] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 612.973986][T30667] ? ___might_sleep+0x1e7/0x310 [ 612.979525][T30667] ? arch_local_save_flags+0x50/0x50 [ 612.984823][T30667] __should_failslab+0x121/0x190 [ 612.989770][T30667] should_failslab+0x9/0x14 [ 612.994283][T30667] kmem_cache_alloc_trace+0x2d1/0x760 [ 612.999684][T30667] __memcg_init_list_lru_node+0xef/0x2e0 [ 613.005321][T30667] ? kvfree_rcu+0x20/0x20 [ 613.009657][T30667] ? __kmalloc_node+0x4e/0x70 [ 613.014348][T30667] __list_lru_init+0x4d9/0x850 [ 613.019119][T30667] ? list_lru_destroy+0x520/0x520 [ 613.021816][T30685] overlayfs: './file0' not a directory [ 613.024140][T30667] ? down_read+0x120/0x120 [ 613.024159][T30667] ? init_wait_entry+0x1c0/0x1c0 [ 613.024178][T30667] ? prealloc_shrinker+0xdf/0x340 [ 613.043958][T30667] alloc_super+0x8c3/0xa10 [ 613.048384][T30667] ? destroy_unused_super.part.0+0x110/0x110 [ 613.054387][T30667] sget_userns+0x164/0x6c0 [ 613.058813][T30667] ? get_anon_bdev+0xc0/0xc0 [ 613.063405][T30667] ? vfs_get_super+0x260/0x260 [ 613.068169][T30667] ? security_capable+0x9b/0xd0 [ 613.073036][T30667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.079280][T30667] ? ns_capable_common+0x93/0x100 [ 613.084316][T30667] ? get_anon_bdev+0xc0/0xc0 [ 613.088907][T30667] sget+0x10c/0x150 [ 613.092713][T30667] ? ovl_show_options+0x550/0x550 [ 613.097735][T30667] mount_nodev+0x31/0x110 [ 613.102066][T30667] ovl_mount+0x2d/0x40 [ 613.106137][T30667] ? ovl_own_xattr_set+0x10/0x10 [ 613.107158][T30676] overlayfs: './file0' not a directory [ 613.111075][T30667] legacy_get_tree+0xf2/0x200 [ 613.121191][T30667] vfs_get_tree+0x123/0x450 [ 613.125705][T30667] do_mount+0x1622/0x2fa0 [ 613.130046][T30667] ? copy_mount_string+0x40/0x40 [ 613.134988][T30667] ? kmem_cache_alloc_trace+0x354/0x760 [ 613.140539][T30667] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 613.146780][T30667] ? _copy_from_user+0xdd/0x150 [ 613.151642][T30667] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 10:19:38 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x8002) ioctl$TCFLSH(r0, 0x540b, 0xffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000002c0)) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r2 = geteuid() ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000000c0)={0x3, @default, r2}) r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000140)=0x1ff, 0x4) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x1}}, 0x20) 10:19:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x2, 0x37d, 0x100}) socket$packet(0x11, 0x3, 0x300) read(r1, &(0x7f0000000200)=""/81, 0x51) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) accept(r1, &(0x7f0000000040)=@can, &(0x7f00000000c0)=0x80) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40080, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f00000001c0)={0x1, 0x1, [0x0, 0x1, 0x6, 0x8000, 0xa721, 0xc8, 0x1, 0xf1b8]}) r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400000, 0x10) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000140)) 10:19:38 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x6, 0x8000) getsockname$netrom(r0, &(0x7f0000000080)={{}, [@remote, @rose, @remote, @remote, @rose, @default, @netrom, @bcast]}, &(0x7f0000000140)=0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffffff8, 0x10180) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:38 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:39 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000100)=0x4) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000040)={0x1, 0x9, 0x3}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x100000000, 0xba100) ioctl(r2, 0x2, &(0x7f0000000200)="0af51f023c123f3188a070") rseq(&(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x2, 0xb7e}, 0x2}, 0x20, 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x0, 0x4000000000000000}}, 0xfffffffffffffddd) [ 613.157891][T30667] ? copy_mount_options+0x30e/0x440 [ 613.163103][T30667] ksys_mount+0xdb/0x150 [ 613.167359][T30667] __x64_sys_mount+0xbe/0x150 [ 613.172040][T30667] do_syscall_64+0x1a3/0x800 [ 613.176632][T30667] ? syscall_return_slowpath+0x5f0/0x5f0 [ 613.182267][T30667] ? prepare_exit_to_usermode+0x232/0x3b0 [ 613.187981][T30667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.193524][T30667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.199395][T30667] RIP: 0033:0x458099 [ 613.203265][T30667] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.222844][T30667] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.231230][T30667] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 613.239182][T30667] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 613.247129][T30667] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:39 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x6c, 0xd1) 10:19:39 executing program 5 (fault-call:1 fault-nth:22): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f123f3188a0700000") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$getown(r1, 0x9) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x6, 0x1000, 0xffffffff, {r2, r3+30000000}, 0x41, 0x200}) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x2, 0x8001, 0x8, 0x10001, 0x101, 0x0, 0xfff, {0x0, @in6={{0xa, 0x4e24, 0x1ff, @local, 0x5a36}}, 0xffffffff, 0x7, 0x24, 0x3, 0x8}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x200, 0x30}, 0xc) prctl$PR_SVE_GET_VL(0x33, 0x10a1a) r5 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 10:19:39 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 613.255078][T30667] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 613.263027][T30667] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 613.314680][ C0] net_ratelimit: 4 callbacks suppressed [ 613.314688][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 613.326084][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 613.331901][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 613.337704][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 613.343503][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 613.348039][T30698] overlayfs: unrecognized mount option "worJdir=./file1\" or missing value [ 613.349299][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 613.363664][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 613.369471][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 613.370221][T30699] overlayfs: './file0' not a directory [ 613.375309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 613.386523][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 613.394331][T30701] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 613.401154][T30702] overlayfs: unrecognized mount option "worJdir=./file1\" or missing value 10:19:39 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:39 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x70, 0xd1) 10:19:39 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file2'}}, {@default_permissions='default_permissions', 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000640)=""/4096) write$binfmt_aout(r1, 0x0, 0x0) 10:19:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x10, {0x2, 0x4e22, @rand_addr=0x17759ef0}, 'rose0\x00'}) r1 = syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80084503, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "67c6979d429703d19a17b213385deaaa2f69ec29000b4cf1d15fb346e9de2300"}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0xe2a, 0x4}) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 613.485812][T30708] FAULT_INJECTION: forcing a failure. [ 613.485812][T30708] name failslab, interval 1, probability 0, space 0, times 0 [ 613.505690][T30710] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 613.531242][T30708] CPU: 0 PID: 30708 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 613.540304][T30708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.550356][T30708] Call Trace: [ 613.553656][T30708] dump_stack+0x1db/0x2d0 [ 613.557993][T30708] ? dump_stack_print_info.cold+0x20/0x20 [ 613.563722][T30708] ? __lock_is_held+0xb6/0x140 [ 613.568494][T30708] should_fail.cold+0xa/0x14 [ 613.573096][T30708] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 613.578913][T30708] ? ___might_sleep+0x1e7/0x310 [ 613.583769][T30708] ? arch_local_save_flags+0x50/0x50 [ 613.585164][T30716] overlayfs: unrecognized mount option "default_permissions\" or missing value [ 613.589053][T30708] ? __memcg_init_list_lru_node+0xef/0x2e0 [ 613.589075][T30708] __should_failslab+0x121/0x190 [ 613.589096][T30708] should_failslab+0x9/0x14 [ 613.612168][T30717] overlayfs: unrecognized mount option "default_permissions\" or missing value [ 613.613207][T30708] kmem_cache_alloc_node_trace+0x270/0x720 [ 613.613225][T30708] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 613.613242][T30708] ? __memcg_init_list_lru_node+0x198/0x2e0 [ 613.613265][T30708] __kmalloc_node+0x3d/0x70 [ 613.613284][T30708] kvmalloc_node+0x68/0x100 [ 613.613302][T30708] __list_lru_init+0x5d5/0x850 [ 613.626531][T30718] overlayfs: './file0' not a directory [ 613.628014][T30708] ? list_lru_destroy+0x520/0x520 [ 613.628030][T30708] ? down_read+0x120/0x120 [ 613.628050][T30708] ? init_wait_entry+0x1c0/0x1c0 [ 613.673100][T30708] ? prealloc_shrinker+0xdf/0x340 [ 613.678148][T30708] alloc_super+0x8c3/0xa10 [ 613.682582][T30708] ? destroy_unused_super.part.0+0x110/0x110 [ 613.688577][T30708] sget_userns+0x164/0x6c0 [ 613.692997][T30708] ? get_anon_bdev+0xc0/0xc0 [ 613.697595][T30708] ? vfs_get_super+0x260/0x260 [ 613.702364][T30708] ? security_capable+0x9b/0xd0 [ 613.707229][T30708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.713471][T30708] ? ns_capable_common+0x93/0x100 [ 613.718501][T30708] ? get_anon_bdev+0xc0/0xc0 [ 613.723092][T30708] sget+0x10c/0x150 [ 613.726904][T30708] ? ovl_show_options+0x550/0x550 [ 613.732011][T30708] mount_nodev+0x31/0x110 [ 613.736319][T30708] ovl_mount+0x2d/0x40 [ 613.740371][T30708] ? ovl_own_xattr_set+0x10/0x10 [ 613.745285][T30708] legacy_get_tree+0xf2/0x200 [ 613.749940][T30708] vfs_get_tree+0x123/0x450 [ 613.754419][T30708] do_mount+0x1622/0x2fa0 [ 613.758729][T30708] ? copy_mount_string+0x40/0x40 [ 613.763674][T30708] ? kmem_cache_alloc_trace+0x354/0x760 [ 613.769224][T30708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 613.775442][T30708] ? _copy_from_user+0xdd/0x150 [ 613.780273][T30708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 613.786512][T30708] ? copy_mount_options+0x30e/0x440 [ 613.791689][T30708] ksys_mount+0xdb/0x150 [ 613.795910][T30708] __x64_sys_mount+0xbe/0x150 [ 613.800566][T30708] do_syscall_64+0x1a3/0x800 [ 613.805148][T30708] ? syscall_return_slowpath+0x5f0/0x5f0 [ 613.810777][T30708] ? prepare_exit_to_usermode+0x232/0x3b0 [ 613.816473][T30708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 613.821997][T30708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.827865][T30708] RIP: 0033:0x458099 [ 613.831969][T30708] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.851552][T30708] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 613.859939][T30708] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 613.867888][T30708] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 613.875846][T30708] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 613.883794][T30708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 613.891739][T30708] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) poll(&(0x7f0000000040)=[{r0, 0x2020}], 0x1, 0xb9c6) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x541b, 0x0) 10:19:39 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x74, 0xd1) 10:19:39 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:39 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 10:19:39 executing program 5 (fault-call:1 fault-nth:23): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 614.002978][T30728] FAULT_INJECTION: forcing a failure. [ 614.002978][T30728] name failslab, interval 1, probability 0, space 0, times 0 [ 614.003452][T30734] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.029273][T30728] CPU: 0 PID: 30728 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 614.038309][T30728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 614.048361][T30728] Call Trace: [ 614.051660][T30728] dump_stack+0x1db/0x2d0 [ 614.056005][T30728] ? dump_stack_print_info.cold+0x20/0x20 [ 614.061742][T30728] should_fail.cold+0xa/0x14 [ 614.066344][T30728] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 614.072165][T30728] ? ___might_sleep+0x1e7/0x310 [ 614.077020][T30728] ? arch_local_save_flags+0x50/0x50 [ 614.082312][T30728] ? check_preemption_disabled+0x48/0x290 [ 614.088044][T30728] __should_failslab+0x121/0x190 [ 614.092988][T30728] should_failslab+0x9/0x14 [ 614.097495][T30728] kmem_cache_alloc_trace+0x2d1/0x760 [ 614.102873][T30728] ? rcu_read_lock_sched_held+0x110/0x130 [ 614.108603][T30728] __memcg_init_list_lru_node+0xef/0x2e0 [ 614.114243][T30728] ? kvfree_rcu+0x20/0x20 [ 614.118576][T30728] ? kasan_kmalloc+0x9/0x10 [ 614.123079][T30728] ? __kmalloc_node+0x4e/0x70 [ 614.127780][T30728] __list_lru_init+0x4d9/0x850 [ 614.132546][T30728] ? list_lru_destroy+0x520/0x520 [ 614.137574][T30728] ? down_read+0x120/0x120 [ 614.141995][T30728] ? init_wait_entry+0x1c0/0x1c0 [ 614.146937][T30728] ? prealloc_shrinker+0xdf/0x340 [ 614.147647][T30748] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.151964][T30728] alloc_super+0x8c3/0xa10 [ 614.151986][T30728] ? destroy_unused_super.part.0+0x110/0x110 [ 614.152021][T30728] sget_userns+0x164/0x6c0 [ 614.175015][T30728] ? get_anon_bdev+0xc0/0xc0 [ 614.179608][T30728] ? vfs_get_super+0x260/0x260 [ 614.184399][T30728] ? security_capable+0x9b/0xd0 [ 614.189259][T30728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.195503][T30728] ? ns_capable_common+0x93/0x100 [ 614.200538][T30728] ? get_anon_bdev+0xc0/0xc0 [ 614.205134][T30728] sget+0x10c/0x150 [ 614.208944][T30728] ? ovl_show_options+0x550/0x550 [ 614.213979][T30728] mount_nodev+0x31/0x110 [ 614.218311][T30728] ovl_mount+0x2d/0x40 [ 614.222387][T30728] ? ovl_own_xattr_set+0x10/0x10 [ 614.227330][T30728] legacy_get_tree+0xf2/0x200 [ 614.232013][T30728] vfs_get_tree+0x123/0x450 [ 614.236529][T30728] do_mount+0x1622/0x2fa0 [ 614.240863][T30728] ? calibrate_delay.cold+0x47b/0x539 [ 614.246242][T30728] ? copy_mount_string+0x40/0x40 [ 614.251181][T30728] ? retint_kernel+0x2d/0x2d [ 614.255788][T30728] ? copy_mount_options+0x234/0x440 [ 614.257671][T30756] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.260985][T30728] ? copy_mount_options+0x23d/0x440 [ 614.261004][T30728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 614.261021][T30728] ? copy_mount_options+0x30e/0x440 [ 614.261045][T30728] ksys_mount+0xdb/0x150 [ 614.290101][T30728] __x64_sys_mount+0xbe/0x150 [ 614.294796][T30728] do_syscall_64+0x1a3/0x800 10:19:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x56d, @dev={0xfe, 0x80, [], 0x24}, 0x5}, 0x1c) 10:19:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x228001, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) clock_gettime(0x0, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000840)) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000000880)='./file0\x00', &(0x7f0000000240)={{}, {r3, r4/1000+10000}}, 0x6078e951975d7c8e) r5 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000300)="2ca2c8b837beb89638af457952885527bfa5c9e90bf6ac802856fe45ba6ad6a66252ca67c851d030c8586fa11ee385d9f6f9e56460be5fa3f690b2230c4dbe650bfbd5a8ba98d48e909871497398c6691908bd71ee67", 0x27c, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="0976497cc4a1a525cf5772f34d8eaea5a23fc29ed21ad1d3376a34b8aef767bcac62b630940b9a5bd7bb6056ff735b3945d0159c3bbd6cd8fe35e92f5226e3067e0c7d9a0d5e1e5524c601a09aadbc2b1c19f8", 0x53, 0xfffffffffffffff9) r7 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000540)="2ecd987ad5ff00d47a", 0x9, 0xfffffffffffffffc) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f00000001c0)="600ea22239c72c1a8fcdd3ba8c5033b97fc0384dee3e9f18d6cd234c7c548135f82e2a4b96a24741673769") keyctl$dh_compute(0x17, &(0x7f0000000580)={r5, r6, r7}, &(0x7f00000005c0)=""/230, 0xe6, &(0x7f0000000800)={&(0x7f00000006c0)={'wp384-generic\x00'}, &(0x7f0000000700)="ac6a226697f70306fb59869960a9c5a24cc79920bf4f6537260b7bf8ce3501ffd0f158028ce1f94f952f943e53c3df74e0ab7d4b48df0898825988786fc97cf78b945a053501f26b301af655e301506580e39696b0996e444817cf5122be9074a0421cd57088820ae5d66512256fc58e9644f0afd00d79021ed199d43a7cb5235cbf3e43a687b998d735d8043ae5d6460633cfd85f95e3431f36320d573a08060b140f6e5c74e654f14284b11a43c5d1b72fa40b4aa21f7a9b062052ad82b832408ca411a16b3d57c0", 0xc9}) 10:19:39 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) fdatasync(r1) 10:19:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x4003, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x80, 0x8, 0x5, 0x888a, 0x0, 0xf5be, 0x20, 0x9, 0x80000001, 0x9, 0x5, 0x0, 0x7, 0x3, 0x1, 0x2, 0x0, 0xc6f9, 0xb44, 0x0, 0x3f, 0x200, 0x9, 0x3f, 0x4e8, 0x0, 0x905, 0xfffffffffffff000, 0x0, 0x0, 0x132f, 0x400, 0x10000, 0xe6, 0x2, 0x800, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x1000, 0x2, 0x7, 0x7, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r1, 0x8) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000280)={r1, 0x0, 0x6, 0x7, 0x4}) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000200)=""/128, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0xa7, "9af8fab8f0b6c93713e57505d7f19ad47e6b1d0204d23d795fdd56dd25c2796c7b0978c6bc6ceff0f7a00bf4a72e7027fe84c72943fe7a01d3d122cbe7bd3f87142a8d68697adcea3e6fc6fb7ad3452302ba3c9c9a24f03cf87425aef01cb9133edf3f38e99aebadf24933867fc3179c9d4cd295ef6b5d7ce49fbf06f8447da75cf0f3f99bfff7622a134aa72bc388d9acb301da224f962511e483d4a1ffaf12e568ff6db178b0"}, &(0x7f0000000340)=0xaf) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r2, 0xffffffffffffffff}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$FUSE_DIRENT(r1, &(0x7f00000002c0)={0x80, 0xffffffffffffffda, 0x2, [{0x0, 0x0, 0xe, 0xffffffff, '/dev/admmidi#\x00'}, {0x3, 0x9, 0x10, 0xfffffffffffffffa, '/dev/sequencer2\x00'}, {0x1, 0x9, 0x1, 0x0, '{'}]}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:40 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 614.299393][T30728] ? syscall_return_slowpath+0x5f0/0x5f0 [ 614.305021][T30728] ? prepare_exit_to_usermode+0x232/0x3b0 [ 614.308920][T30743] overlayfs: filesystem on './file0' not supported as upperdir [ 614.310751][T30728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 614.310778][T30728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 614.329701][T30728] RIP: 0033:0x458099 [ 614.333592][T30728] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 614.353185][T30728] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 614.361574][T30728] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 614.369525][T30728] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 614.377472][T30728] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 614.385420][T30728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 614.393411][T30728] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:40 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x20200, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x2a96449f, 0x0, 0x0, 0x2, 0x1000, 0x3e6, 0x800000000000000}, 0x1c) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040), 0x9) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/151) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) 10:19:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x8, 0x6, "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", 0x5f, 0x6f, 0x1, 0x400, 0x3, 0x0, 0x4d, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:40 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:40 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) getresgid(&(0x7f0000001a80)=0x0, &(0x7f0000001ac0), &(0x7f0000001b00)) fstat(0xffffffffffffff9c, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000740)='hfsplus\x00', &(0x7f0000000780)='./file1\x00', 0x81, 0x5, &(0x7f0000001a00)=[{&(0x7f00000007c0)="f90e3e175a7d142c9d3c3413aa4d1dda2ee9bf55a5c9cb8a5df4e88c4615c059bef8da2fd7a1c3015e489b9124f6f19a1de68c2810fefd3d75263e513b74af6160cb95a31ab2b4c6464a64997ed121fa8bcb268934277f4f544612f52d6379c0eb60a801ef47a2d60b2f800837404a8425fb464374f350d111f2d969", 0x7c, 0x944c}, {&(0x7f0000000840)="45912def46c62f1a42f976c0b2bdcfe44005661850d5da40fa4cb7c95634590a91626b50ace97287efe36388d573246932cb2e1c15ce6e598b9bcf7501dc1628a57ff888f10ab4daf99ca5294d217b807f4ea9d8a3bc8aed60fd4ed42554d9c0482b6a3830a0951e6a635eb6eeb4f4a518af59cab62fc3da49636fd433b36029bd7de7ddc87ed0bab72d7b0350b38fdb48452e81cd64c84db9012220c5783f57789678953c124ed6c306f250dae2a3afc565d7496a728599e5b2aae1a2624e77bc4641fc0d122522a2968ec33bb7e8f5c66d81a053acfb7e8b297aee084166359c8222643b48c893a9720982b230a0337844341b", 0xf4, 0x8}, {&(0x7f0000000940)="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", 0x1000, 0x1}, {&(0x7f0000001940)="c0dc21bf3af1576cc251a2544a473cf598428170090e033d9ce2a27d1313433e82ab5d10b2c0ece632", 0x29, 0x1ff}, {&(0x7f0000001980)="a81db90adb864dc2f9e89d4f7f3c790bc5fa8b9632958e09fb75b65b2f9a935f19cb8ff6b8c45fbee637d9c64d3888d68bd40dfef6e96d9699344a7410cb9f168b2c57e2da4a4ec5b72a2e70bca2ec315f71580c893334cc07061f8ac4782fc2104ad52f5ab47603399f320746fe2148e8d896e3e1ad8a722e02674e5e", 0x7d}], 0x80000, &(0x7f0000001bc0)=ANY=[@ANYBLOB="747970653dbc5c5a872c63726561746f723d48d0b2f52c6769643d", @ANYRESHEX=r0, @ANYBLOB="2c736d61636b66737472616e736d7574b78670707031766d6e6574312e2c7365636c6162656c2c7569643d", @ANYRESDEC=r1, @ANYBLOB=',func=POLICY_CHECK,\x00']) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000380)=0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='fuse\x00', 0x8000, &(0x7f0000000480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}, {@euid_lt={'euid<', r5}}]}}) r6 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f00000006c0)=""/87, &(0x7f00000005c0)=0x57) write$binfmt_aout(r6, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='overlay\x00', 0x10000, &(0x7f0000000640)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}], [{@hash='hash'}, {@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@euid_eq={'euid', 0x3d, r5}}]}) 10:19:40 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xc0, 0xd1) 10:19:40 executing program 5 (fault-call:1 fault-nth:24): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 614.904000][T30765] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 614.923725][T30769] FAULT_INJECTION: forcing a failure. [ 614.923725][T30769] name failslab, interval 1, probability 0, space 0, times 0 10:19:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000140)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2200000}, 0xfffffffffffffe27, &(0x7f00000001c0)={&(0x7f0000000180)={0x285, r2, 0x100, 0x70bd26, 0x25dfdbff}, 0xffc6}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write$P9_RLERRORu(r1, &(0x7f0000000bc0)={0x14, 0x7, 0x2, {{0x7, 'NET_DM\x00'}, 0x431}}, 0x14) ioctl(r0, 0x1000008916, &(0x7f0000000040)="0af51f023c123f3188a070") r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8000000000002, 0x404) write$9p(r1, &(0x7f0000000980)="4714d6eb515eb6c77eacda288fd3f0712527c8944c34554b3e17b1e3dc9cc4c11af6ba81493bb0c9fcf298801776169377f861dfbe121bbd07ebdc3db945056f8e02f20811bf2960225e684525b48b208f9cf32dbf775292e3ae06e92fa86a94d8f19028b8a9fa9319d1a2734d1dedd32b86f7372edda55fc271aa99535c4fbf719a8997d2d96216c9d5ec0c4b27faa3c29fde0f9e8689c88e389960f25dc712fdfe46b796302bc135d8bf7d5f978dd659d1b08221824c65f586a8508c0a7a04e3c7df079726e44c3b51b488fb218716e68406f32f830af66a044dd05906f7f3792c20204cab6e7e1701113f7b6714c55f43c2db58da407db344", 0xfa) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000b80)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000c00)=0x1, 0x4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000b40)={0x3, @bcast, r4}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$kcm(r3, &(0x7f0000000940)={&(0x7f0000000240)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x2}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="e0b31f716651bad26416c8aa216dc1e2999972556d5f8a147a830264876e2b02cb69c7f76fe26fdc29b0d6126c801beecded1cc606ebbf4531f921e3f55134d4157361d36637d42a2ef9b8abac15f46b41a362e57998dc8f72b847902b11f51538d00fbbeff31c243aa014ef049ea0878f613381904a71b79d591c5fdb91e92764fb196a3ba4ef80fb2a54793e3825f1061a05be135377e953505cb69dea8790e8ab48670867b23176706b24e25622ddd0e3df13a31318da1d549d2028632266f0a7", 0xc2}], 0x1, &(0x7f0000000400)=[{0x60, 0x1ab, 0x5, "7a8f02902a8568a6cc4f716908188ce082e50eb157be4c952cb14717b7b9d9952b3501a0fb6a1d61d6cfecdf477d3125a83f02482c4125cb5b7b419e5820eb61f70799ef093a34f9812bd9819edfc763"}, {0xc8, 0x0, 0x6, "a089bbb6846c6026edd0f3847d60015d84e395810ba297737276114346cdfaf27952a8bb9e3fc7e04652b86b59560dd0f161bc48a7a564f3aa73a08bdefb3814d1ec6be49540fac9a208825321490b3146b88dc93217881bc496e704df4fbd80ca3f5d1a86e9a09b668db509b1410528a2d7d1a0b92429d08036a0ef3378f7d9aaa868ecc1c54c2b04cd9509d9922685812e2423b3052cf19bcf14ce041868203a30fd3e55677cbc5cdf5a85611af73816"}, {0x50, 0x10f, 0x1, "69451e6d52bce206b9b4dc273179a9bc19b5fa564046b854f81e4cd86b00739e4050e2bbb299d66e77e17f59f20478ffd0a894631d81fa93b61d"}, {0x98, 0x117, 0x8cae, "69f3cf44887fac9c13335f85cdced8d3a7ead53ea92d3e264ce470cb9f004cb1e37c025cd77689ef4bbd8c143c325cda0fa6189b19b6ce3304777a91d3fb55bafc13c47dbfed238d4282a73fd4b8d5ac8cafdc397f31322a34b68c4c34867be5f81e74da0ac8e125c2450fb49f54d17b5a4fd86f91bcafc15ced1b1c0e1874029f9ec2"}, {0x58, 0x10f, 0x2d2b, "2908361dc897c42608bd855635957663526d6deb63f4fa096195f958bfa320abdcdb85d9da592f5e082fb1e620b1d56bae33dc9620e308f4e3a48e4e21bd44d963f019273d975079"}, {0x58, 0x105, 0x1, "1dc73b607846de198a7dcd08832ca6ddad63fec02ff60e0533dd5c06981e95fdcb0898da84d00de93be29663ebd8ddf5e03ef93140e5a69c8488b169d31fd7dfa4975c8822b4"}, {0xc0, 0x85, 0x40, "baa638ceb29553483b06adb28a23f1032d85a3531372da1d1dc8244b883141a01ff32330fb8b3d410cb29dac2c03af922b913a6fe1b6911e7c6b90ebeb4d0eaf20b5be615d5bf211433a962b27fd1506ce2dde7dd857bf1a679248354d9a875470d976f63aa4767af5465747ca7c2a7f29f9dd7cb3d2f09cdf505a0c4b564cbda9e4bf39667c1be2f95b0aae61e68cc6df03fc062fa8e9d610f0320c0b9e67548ef98db15dcf65539b4cc2126f6c"}, {0xe0, 0x111, 0x0, "a260fe5d30051422e0a480b277dc58dfe549c4df0b01630f7ef5f9461fa5e6947bdffa5dfe2237354eb747d78cf0eff597738b1d5286b1f9f3f388802c5ff17da7fe413e1f4a7de5e83f44d54e33195f5efe307dc07da4d460431dc4bac8464b70d7ce744e35ba57a885c906d61d1df54310ed0dadca35cd55d47e78f0ffd35ee42be2f146da6b2afb779c5cda6f2e67749a7ec76761753c596cadc9fb94ba3502b75cd5b0e1f631197e48beb2782e11bc2e2b1007237128cad717194aae0f51032ad17fd679fca75e36b6"}, {0x40, 0x102, 0x7, "64d42d7c0f02b8995e8e38f87632d1cb9b6a11a7e9b4fa1f0a1fa4ab8874d29d41b664d52cf997c84d9297"}, {0xa0, 0x0, 0x2, "924312e8213c22970138d662b09d72ff86d59e8a130cd5b09f896a70bce6863dead724574e4e57cdb42db5650c32fece5531bf3cba317e3e1654b7658043a0d9378a43019d44fc258a6a5e32843d12b846608522eed8b1e667e12ad65b6ee1a29490392bc9eda5a25208f664711a3d53322c56d7ef1200b3592fe8ca028e082eff95ba2415758885c8b8"}], 0x540}, 0x800) [ 614.966717][T30778] overlayfs: './file0' not a directory [ 614.978011][T30763] overlayfs: unrecognized mount option "hash" or missing value [ 615.002839][ T26] kauditd_printk_skb: 28 callbacks suppressed 10:19:40 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 615.002852][ T26] audit: type=1804 audit(1547720380.881:354): pid=30778 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1012/file0/file0" dev="overlay" ino=103800 res=1 [ 615.025610][T30769] CPU: 0 PID: 30769 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 615.043584][T30769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.053647][T30769] Call Trace: [ 615.056951][T30769] dump_stack+0x1db/0x2d0 [ 615.061294][T30769] ? dump_stack_print_info.cold+0x20/0x20 [ 615.062342][T30782] overlayfs: './file0' not a directory [ 615.067032][T30769] ? __x64_sys_mount+0xbe/0x150 [ 615.067055][T30769] ? do_syscall_64+0x1a3/0x800 [ 615.067073][T30769] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.067090][T30769] ? print_usage_bug+0xd0/0xd0 [ 615.067112][T30769] should_fail.cold+0xa/0x14 [ 615.067130][T30769] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 615.067150][T30769] ? ___might_sleep+0x1e7/0x310 [ 615.067162][T30769] ? arch_local_save_flags+0x50/0x50 10:19:41 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='u\bperdir=./file0,lowerdir=./file0,workdir=./file1\\\x00']) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000004c0)={0x4, [0x401, 0x400, 0x8, 0x3]}, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x400000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1d0, r2, 0x811, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb0b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1565}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, '\x00'}}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdb61}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x16}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r4, 0x0, 0x0) [ 615.067181][T30769] __should_failslab+0x121/0x190 [ 615.067195][T30769] should_failslab+0x9/0x14 [ 615.067207][T30769] kmem_cache_alloc_trace+0x2d1/0x760 [ 615.067225][T30769] __memcg_init_list_lru_node+0xef/0x2e0 [ 615.067238][T30769] ? kvfree_rcu+0x20/0x20 [ 615.067249][T30769] ? __kmalloc_node+0x4e/0x70 [ 615.067264][T30769] __list_lru_init+0x4d9/0x850 [ 615.067281][T30769] ? list_lru_destroy+0x520/0x520 [ 615.067295][T30769] ? down_read+0x120/0x120 [ 615.067312][T30769] ? init_wait_entry+0x1c0/0x1c0 [ 615.067327][T30769] ? prealloc_shrinker+0xdf/0x340 [ 615.067348][T30769] alloc_super+0x8c3/0xa10 [ 615.067368][T30769] ? destroy_unused_super.part.0+0x110/0x110 [ 615.067401][T30769] sget_userns+0x164/0x6c0 [ 615.067417][T30769] ? get_anon_bdev+0xc0/0xc0 [ 615.067435][T30769] ? vfs_get_super+0x260/0x260 [ 615.067449][T30769] ? security_capable+0x9b/0xd0 [ 615.067468][T30769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.067480][T30769] ? ns_capable_common+0x93/0x100 [ 615.067501][T30769] ? get_anon_bdev+0xc0/0xc0 [ 615.077492][ T26] audit: type=1804 audit(1547720380.961:355): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1141/file0/file0" dev="overlay" ino=102964 res=1 [ 615.077790][T30769] sget+0x10c/0x150 [ 615.077810][T30769] ? ovl_show_options+0x550/0x550 [ 615.077826][T30769] mount_nodev+0x31/0x110 [ 615.077848][T30769] ovl_mount+0x2d/0x40 [ 615.085801][T30782] overlayfs: unrecognized mount option "hash" or missing value [ 615.088661][T30769] ? ovl_own_xattr_set+0x10/0x10 [ 615.088680][T30769] legacy_get_tree+0xf2/0x200 [ 615.088698][T30769] vfs_get_tree+0x123/0x450 [ 615.088720][T30769] do_mount+0x1622/0x2fa0 [ 615.088742][T30769] ? copy_mount_string+0x40/0x40 [ 615.093642][ T26] audit: type=1804 audit(1547720380.961:356): pid=30782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1141/file0/file0" dev="overlay" ino=102964 res=1 [ 615.098075][T30769] ? kmem_cache_alloc_trace+0x354/0x760 [ 615.098094][T30769] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 615.098109][T30769] ? _copy_from_user+0xdd/0x150 [ 615.098128][T30769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.098146][T30769] ? copy_mount_options+0x30e/0x440 [ 615.098168][T30769] ksys_mount+0xdb/0x150 [ 615.098187][T30769] __x64_sys_mount+0xbe/0x150 [ 615.098205][T30769] do_syscall_64+0x1a3/0x800 [ 615.098224][T30769] ? syscall_return_slowpath+0x5f0/0x5f0 [ 615.131858][ T26] audit: type=1804 audit(1547720381.011:357): pid=30779 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1012/file0/file0" dev="overlay" ino=103800 res=1 [ 615.134532][T30769] ? prepare_exit_to_usermode+0x232/0x3b0 [ 615.134555][T30769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.134584][T30769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.399700][T30769] RIP: 0033:0x458099 [ 615.403585][T30769] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 615.423173][T30769] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 615.431572][T30769] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 615.439532][T30769] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 615.447491][T30769] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 615.455451][T30769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 10:19:41 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000140)={r2, &(0x7f00000000c0)=""/81}) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:41 executing program 5 (fault-call:1 fault-nth:25): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 615.463407][T30769] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 615.520246][T30791] FAULT_INJECTION: forcing a failure. [ 615.520246][T30791] name failslab, interval 1, probability 0, space 0, times 0 [ 615.534087][T30786] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 615.568464][T30791] CPU: 1 PID: 30791 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 615.577531][T30791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 615.587588][T30791] Call Trace: [ 615.590889][T30791] dump_stack+0x1db/0x2d0 [ 615.595232][T30791] ? dump_stack_print_info.cold+0x20/0x20 [ 615.600962][T30791] ? __x64_sys_mount+0xbe/0x150 [ 615.605829][T30791] ? do_syscall_64+0x1a3/0x800 [ 615.607656][T30797] overlayfs: unrecognized mount option "uperdir=./file0" or missing value [ 615.610595][T30791] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.610614][T30791] ? print_usage_bug+0xd0/0xd0 [ 615.610639][T30791] should_fail.cold+0xa/0x14 [ 615.634637][T30791] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 615.640459][T30791] ? ___might_sleep+0x1e7/0x310 [ 615.645319][T30791] ? arch_local_save_flags+0x50/0x50 [ 615.650625][T30791] __should_failslab+0x121/0x190 [ 615.655568][T30791] should_failslab+0x9/0x14 [ 615.660079][T30791] kmem_cache_alloc_trace+0x2d1/0x760 [ 615.665471][T30791] __memcg_init_list_lru_node+0xef/0x2e0 [ 615.669895][T30798] overlayfs: unrecognized mount option "uperdir=./file0" or missing value [ 615.671115][T30791] ? kvfree_rcu+0x20/0x20 [ 615.671133][T30791] ? __kmalloc_node+0x4e/0x70 [ 615.671153][T30791] __list_lru_init+0x4d9/0x850 [ 615.693459][T30791] ? list_lru_destroy+0x520/0x520 [ 615.698503][T30791] ? down_read+0x120/0x120 [ 615.702927][T30791] ? init_wait_entry+0x1c0/0x1c0 [ 615.703014][ T26] audit: type=1804 audit(1547720381.451:358): pid=30798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1142/file0/file0" dev="sda1" ino=16563 res=1 [ 615.707866][T30791] ? prealloc_shrinker+0xdf/0x340 [ 615.707890][T30791] alloc_super+0x8c3/0xa10 [ 615.707911][T30791] ? destroy_unused_super.part.0+0x110/0x110 [ 615.748232][ T26] audit: type=1804 audit(1547720381.451:359): pid=30798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1142/file0/file0" dev="sda1" ino=16563 res=1 [ 615.748499][T30791] sget_userns+0x164/0x6c0 [ 615.748520][T30791] ? get_anon_bdev+0xc0/0xc0 [ 615.777550][T30791] ? vfs_get_super+0x260/0x260 [ 615.786863][T30791] ? security_capable+0x9b/0xd0 [ 615.786884][T30791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.786902][T30791] ? ns_capable_common+0x93/0x100 [ 615.803003][T30791] ? get_anon_bdev+0xc0/0xc0 [ 615.807609][T30791] sget+0x10c/0x150 [ 615.811422][T30791] ? ovl_show_options+0x550/0x550 [ 615.812259][T30802] overlayfs: './file0' not a directory [ 615.816446][T30791] mount_nodev+0x31/0x110 [ 615.816464][T30791] ovl_mount+0x2d/0x40 [ 615.816478][T30791] ? ovl_own_xattr_set+0x10/0x10 [ 615.816498][T30791] legacy_get_tree+0xf2/0x200 [ 615.816516][T30791] vfs_get_tree+0x123/0x450 [ 615.844650][T30791] do_mount+0x1622/0x2fa0 [ 615.845253][ T26] audit: type=1804 audit(1547720381.451:360): pid=30800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1143/file0" dev="sda1" ino=16549 res=1 [ 615.849000][T30791] ? copy_mount_string+0x40/0x40 [ 615.849023][T30791] ? kmem_cache_alloc_trace+0x354/0x760 [ 615.877795][ T26] audit: type=1804 audit(1547720381.451:361): pid=30800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1143/file0" dev="sda1" ino=16549 res=1 [ 615.878597][T30791] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 615.878614][T30791] ? _copy_from_user+0xdd/0x150 [ 615.878633][T30791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 615.908266][T30791] ? copy_mount_options+0x30e/0x440 [ 615.908286][T30791] ksys_mount+0xdb/0x150 [ 615.908306][T30791] __x64_sys_mount+0xbe/0x150 [ 615.927058][T30804] overlayfs: unrecognized mount option "upper_ir=./file0" or missing value [ 615.930809][T30791] do_syscall_64+0x1a3/0x800 [ 615.930835][T30791] ? syscall_return_slowpath+0x5f0/0x5f0 [ 615.938934][T30805] overlayfs: unrecognized mount option "upper_ir=./file0" or missing value [ 615.939723][T30791] ? prepare_exit_to_usermode+0x232/0x3b0 [ 615.939744][T30791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 615.939769][T30791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 615.952902][T30791] RIP: 0033:0x458099 [ 615.952917][T30791] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 615.952930][T30791] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:19:41 executing program 4: mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00c51ff851c61d2160"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x1) write$binfmt_aout(r1, 0x0, 0x0) 10:19:41 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065725f69723d2e2f66696c65302c6c6f7765726469723d2e2f66696c651b2c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x11) write$binfmt_aout(r1, 0x0, 0x20a) 10:19:41 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./fmle0,workdir=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:41 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x248000, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x4, 0xbef9, [{}, {0x4, 0x0, 0x98e}, {0xe93}, {0x7, 0x0, 0x2}]}) 10:19:41 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:41 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x300, 0xd1) [ 616.008247][T30791] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 616.008257][T30791] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 616.008267][T30791] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 616.008281][T30791] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 616.029921][T30808] overlayfs: failed to resolve './fmle0': -2 [ 616.032596][T30791] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:42 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 616.093376][T30817] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:42 executing program 5 (fault-call:1 fault-nth:26): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:42 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x2, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 616.154003][T30820] overlayfs: './file0' not a directory [ 616.195669][ T26] audit: type=1804 audit(1547720382.081:362): pid=30808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1145/file0/file0" dev="sda1" ino=16527 res=1 [ 616.228709][T30826] overlayfs: './file0' not a directory 10:19:42 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8, &(0x7f0000000040)="d3575b379682fba4f8a07f5446226aacd9a05b7ea308baa0e179acd9b670869d28aeaafe0ca5bf90efd67c133675d904329a778d2e96a2c1aee7d906fbfbc24d4d0d625c624b6de5bc84ce53bcdb12d9c09b68d3dec971979780ae3baf4adbdb06fdeb2776f94a175456898a99cbdfd11f7721ba10b23bff9cda537d0540912d67bc79413dccb86a6119ddc1a5edc9dbdc23ed694eecdbb95cb6d545dcbcadbe169b7a5f5cb350b0b4f762be186257eef29685d4") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x800, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000380)={0xfffffff, 0x3, 0xef5, [], &(0x7f0000000340)={0xb90bdf, 0x3, [], @p_u16=&(0x7f0000000300)=0x129}}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000140)={{0x7f, 0x9}, {0x1f, 0xbd}, 0xcf49, 0x2, 0x6}) [ 616.244370][T30830] FAULT_INJECTION: forcing a failure. [ 616.244370][T30830] name failslab, interval 1, probability 0, space 0, times 0 10:19:42 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="752f66696c65302c6c6f77a64a9759ab2ad48639f965722e2f66696c60302c776f726b6465315c00000000000000000000000000eb632f435bd08cc568bd95ebbb0529f8ee2a43a4649f41f7b488d2b4d50baebd8c58e0bea091cbe416a61f4d33d8b14a8368c9928a7bcfa62e99"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000240)=""/153, 0x99, 0x100, &(0x7f0000000040)=@file={0x0, './file1\x00'}, 0x6e) [ 616.277869][ T26] audit: type=1804 audit(1547720382.101:363): pid=30808 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1145/file0/file0" dev="sda1" ino=16527 res=1 [ 616.277914][T30836] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 616.319744][T30830] CPU: 1 PID: 30830 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 616.328794][T30830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.338850][T30830] Call Trace: [ 616.342160][T30830] dump_stack+0x1db/0x2d0 [ 616.346502][T30830] ? dump_stack_print_info.cold+0x20/0x20 [ 616.352242][T30830] should_fail.cold+0xa/0x14 [ 616.352247][T30839] overlayfs: unrecognized mount option "u/file0" or missing value [ 616.356712][T30840] overlayfs: unrecognized mount option "u/file0" or missing value [ 616.356848][T30830] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 616.356871][T30830] ? ___might_sleep+0x1e7/0x310 [ 616.356891][T30830] ? arch_local_save_flags+0x50/0x50 [ 616.388403][T30830] ? check_preemption_disabled+0x48/0x290 [ 616.394143][T30830] __should_failslab+0x121/0x190 [ 616.399091][T30830] should_failslab+0x9/0x14 [ 616.403607][T30830] kmem_cache_alloc_trace+0x2d1/0x760 [ 616.408997][T30830] ? rcu_read_lock_sched_held+0x110/0x130 [ 616.414731][T30830] __memcg_init_list_lru_node+0xef/0x2e0 [ 616.420373][T30830] ? kvfree_rcu+0x20/0x20 [ 616.424715][T30830] ? kasan_kmalloc+0x9/0x10 [ 616.429223][T30830] ? __kmalloc_node+0x4e/0x70 [ 616.434019][T30830] __list_lru_init+0x4d9/0x850 [ 616.438794][T30830] ? list_lru_destroy+0x520/0x520 [ 616.439040][T30846] overlayfs: './file0' not a directory [ 616.443819][T30830] ? down_read+0x120/0x120 [ 616.443838][T30830] ? init_wait_entry+0x1c0/0x1c0 [ 616.443859][T30830] ? prealloc_shrinker+0xdf/0x340 [ 616.463650][T30830] alloc_super+0x8c3/0xa10 [ 616.468088][T30830] ? destroy_unused_super.part.0+0x110/0x110 [ 616.474094][T30830] sget_userns+0x164/0x6c0 [ 616.478521][T30830] ? get_anon_bdev+0xc0/0xc0 [ 616.483122][T30830] ? vfs_get_super+0x260/0x260 [ 616.487892][T30830] ? security_capable+0x9b/0xd0 10:19:42 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x21}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x401, 0x6718, 0x8008, 0x2, 0x2, 0x1, 0x3f, 0x200, r2}, &(0x7f0000000100)=0x20) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000140)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:42 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x1, 0x1, 0x3, 0xa4, 0x80000000, 0x5}) write$binfmt_aout(r1, 0x0, 0x0) 10:19:42 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@dev}, &(0x7f00000000c0)=0x14) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:42 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdir=./file1\\@']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r2 = getpid() timer_create(0x5, &(0x7f0000000040)={0x0, 0x1b, 0x1, @tid=r2}, &(0x7f0000000080)) write$binfmt_aout(r1, 0x0, 0x0) 10:19:42 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = dup(r0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0xeba4, 0x4) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={&(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x6, 0x8, 0x2}) getpeername$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bind(r1, &(0x7f0000000340)=@hci={0x1f, r2}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 616.492774][T30830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 616.499018][T30830] ? ns_capable_common+0x93/0x100 [ 616.504050][T30830] ? get_anon_bdev+0xc0/0xc0 [ 616.508650][T30830] sget+0x10c/0x150 [ 616.512475][T30830] ? ovl_show_options+0x550/0x550 [ 616.517505][T30830] mount_nodev+0x31/0x110 [ 616.521845][T30830] ovl_mount+0x2d/0x40 [ 616.525941][T30830] ? ovl_own_xattr_set+0x10/0x10 [ 616.530891][T30830] legacy_get_tree+0xf2/0x200 [ 616.535600][T30830] vfs_get_tree+0x123/0x450 [ 616.540118][T30830] do_mount+0x1622/0x2fa0 [ 616.544469][T30830] ? copy_mount_string+0x40/0x40 [ 616.549415][T30830] ? kmem_cache_alloc_trace+0x354/0x760 [ 616.554985][T30830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 616.561234][T30830] ? copy_mount_options+0x30e/0x440 [ 616.566449][T30830] ksys_mount+0xdb/0x150 [ 616.570705][T30830] __x64_sys_mount+0xbe/0x150 [ 616.575399][T30830] do_syscall_64+0x1a3/0x800 [ 616.580006][T30830] ? syscall_return_slowpath+0x5f0/0x5f0 [ 616.585648][T30830] ? prepare_exit_to_usermode+0x232/0x3b0 [ 616.591375][T30830] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 616.591402][T30830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 616.602817][T30830] RIP: 0033:0x458099 [ 616.602832][T30830] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 616.602845][T30830] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 616.634717][T30830] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:42 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x408, 0xd1) 10:19:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0x0, 0x5, {0x81, 0x4, 0x1f, 0x10000}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0xffffffffffffffff, 0x3, 0x1, 0x3, 0x9}, 0x100000000, 0x5, 0x5}) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x420000, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000140)) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x9) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000200)=@req3={0x9, 0x4, 0xf1, 0x6, 0x8, 0x4, 0x100000001}, 0x1c) [ 616.642696][T30830] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 616.650676][T30830] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 616.658733][T30830] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 616.666695][T30830] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:42 executing program 5 (fault-call:1 fault-nth:27): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:42 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8200, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) 10:19:42 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 616.767003][T30867] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 616.787030][T30870] overlayfs: failed to resolve './file1@': -2 [ 616.794398][T30872] FAULT_INJECTION: forcing a failure. [ 616.794398][T30872] name failslab, interval 1, probability 0, space 0, times 0 10:19:42 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x240) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r1}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:42 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x4, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) [ 616.813035][T30873] overlayfs: './file0' not a directory [ 616.832648][T30872] CPU: 1 PID: 30872 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 616.841689][T30872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 616.851747][T30872] Call Trace: [ 616.855052][T30872] dump_stack+0x1db/0x2d0 [ 616.859405][T30872] ? dump_stack_print_info.cold+0x20/0x20 [ 616.865132][T30872] ? __x64_sys_mount+0xbe/0x150 [ 616.869998][T30872] ? do_syscall_64+0x1a3/0x800 [ 616.874775][T30872] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 616.880849][T30872] ? print_usage_bug+0xd0/0xd0 [ 616.885641][T30872] should_fail.cold+0xa/0x14 [ 616.890289][T30872] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 616.894777][T30881] overlayfs: './file0' not a directory [ 616.896151][T30872] ? ___might_sleep+0x1e7/0x310 [ 616.906425][T30872] ? arch_local_save_flags+0x50/0x50 [ 616.911739][T30872] __should_failslab+0x121/0x190 [ 616.916690][T30872] should_failslab+0x9/0x14 [ 616.921205][T30872] kmem_cache_alloc_trace+0x2d1/0x760 [ 616.926602][T30872] __memcg_init_list_lru_node+0xef/0x2e0 [ 616.932251][T30872] ? kvfree_rcu+0x20/0x20 [ 616.936596][T30872] ? __kmalloc_node+0x4e/0x70 [ 616.941286][T30872] __list_lru_init+0x4d9/0x850 [ 616.946067][T30872] ? list_lru_destroy+0x520/0x520 [ 616.951100][T30872] ? down_read+0x120/0x120 [ 616.955526][T30872] ? init_wait_entry+0x1c0/0x1c0 [ 616.960462][T30872] ? prealloc_shrinker+0xdf/0x340 [ 616.965488][T30872] alloc_super+0x8c3/0xa10 [ 616.969917][T30872] ? destroy_unused_super.part.0+0x110/0x110 [ 616.975989][T30872] sget_userns+0x164/0x6c0 [ 616.980397][T30872] ? get_anon_bdev+0xc0/0xc0 [ 616.984973][T30872] ? vfs_get_super+0x260/0x260 [ 616.989808][T30872] ? security_capable+0x9b/0xd0 [ 616.994658][T30872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 617.000970][T30872] ? ns_capable_common+0x93/0x100 [ 617.005996][T30872] ? get_anon_bdev+0xc0/0xc0 [ 617.010571][T30872] sget+0x10c/0x150 [ 617.014376][T30872] ? ovl_show_options+0x550/0x550 [ 617.019410][T30872] mount_nodev+0x31/0x110 [ 617.023727][T30872] ovl_mount+0x2d/0x40 [ 617.027785][T30872] ? ovl_own_xattr_set+0x10/0x10 [ 617.032717][T30872] legacy_get_tree+0xf2/0x200 [ 617.037398][T30872] vfs_get_tree+0x123/0x450 [ 617.041905][T30872] do_mount+0x1622/0x2fa0 [ 617.046236][T30872] ? copy_mount_string+0x40/0x40 [ 617.051161][T30872] ? kmem_cache_alloc_trace+0x354/0x760 [ 617.056764][T30872] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 617.062993][T30872] ? _copy_from_user+0xdd/0x150 [ 617.067830][T30872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 617.074118][T30872] ? copy_mount_options+0x30e/0x440 [ 617.079303][T30872] ksys_mount+0xdb/0x150 [ 617.083540][T30872] __x64_sys_mount+0xbe/0x150 [ 617.088206][T30872] do_syscall_64+0x1a3/0x800 [ 617.092780][T30872] ? syscall_return_slowpath+0x5f0/0x5f0 [ 617.098400][T30872] ? prepare_exit_to_usermode+0x232/0x3b0 [ 617.104109][T30872] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 617.109712][T30872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 617.115602][T30872] RIP: 0033:0x458099 [ 617.119488][T30872] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 617.139075][T30872] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 617.147470][T30872] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 617.155424][T30872] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 10:19:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000001c40)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x80140}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000040)={0x24, 0x34, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x14, 0x89, @ipv6=@remote}]}, 0x24}, {&(0x7f0000000400)={0x13fc, 0x1e, 0x2, 0x70bd25, 0x25dfdbff, "", [@typed={0x4, 0x4a}, @nested={0x1274, 0x64, [@generic="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", @generic="36e6059d9b9b875ad731372a7b93db4701a2d4e9f95d1964760796232f1e50bf7d333f1a0be21a35ff9bf054d59f328019ea6db54d4c19603f16cc84394102223c16c4734be83a834a74b2b07ab4fdd9a914b47f343b0f3bc3424d1cebfbc60289aa446c75061b7db67f3a64bafed09ea86192eb4f82c58c7257b973efa5", @generic="bd262d08e1dad73737f427fb1d15c4348d84f388e3c6f72d03d0c015e46c809ae32f9efe531ca1911b9ce5a60f82fa71252ca5be7fccba4010fe2ee95e12151d6080119899e0752c78abee57fae6878e0c4a58d9e0e2baba9945beef6c1564d70319fb8ad520ad7878979edc93f7a15094dbc4199faf071dd06b9cc91ce21f0ac495430647fe5789bd5867fde1982188d358acac50ada7b25ef9776270abf31edc67a5a81cd8a58982a30535f2cedcbfbd3b3dbb3d67d8bf460c3a57", @typed={0xd0, 0x85, @binary="dffe4527ce9a47be3863391e06e2812bdbc18a388821adb7868203bf22850da1245d631fb6d1a129915a2d2aa5090023058e447f5c9edd5d1dfb1666edc304f7b939f7e55bdce6361c6dc34399124ea18b4e688c88c1c9f0be36828847a8f2f5fe5db21da283039607b4096211ac6b75cfc734b56a9a33855df5f0a06109e9c4076af3b9826a640a386c8c192d0d4253a555a894951817ccbd212ddfb80fef27c8a1e66553d99e57118c89bf2825c4414db712628e719e0f0d6c904244e2e86d8c1b43a0633b6054a7c4"}, @generic="ca7508ed048121510560ca1ed9fcef5f288226b0f66734c045a52c7c2fb5364c59f713690a21cc6dabe5c7b4765ae4339369d7931d4b094e3f", @generic="a9a2e8dde2f6a4494638515f4cd12dc4d6ffd5a560b9b363063c1d14d022508b6f7b61d986fb1537478c816f75"]}, @typed={0x8, 0x34, @uid=r2}, @generic="b8ab7e1d5dc3533cc91d8a626bdea43e6abe97826c35421a48ade4a50cadda73290f7e8e62ebb0348233860842951748447265ed7c417d7b5998e9b226213166746df305447947cd51c6aa5a4da551b1a910a6af3cf2f789b7cad1d4738187b08bdddbcab6e0de325d21e488e2c33bb32b100ffe23f86cba04a2b37859c0d5b95d28a2aff6eeb4dc5b7c08d8936c14", @generic="d219e31c6b6ee5d349241ca84678ba8b57f9d16fab08e7b4c40ffb79a27990f9943bb03a4230e668eb6d4a082d71afeae6346bb3fcb04319ea80d4a48670824f834c1317addb69acc907eeffb7311897397e107eb83d7c7f504c340c0fa767a3771c994ea84eb1875b0e1e5b6f38093cfb6e17e218096541d32e3c526135aebe8d00483884dd74523e3819f160a8fe8d43a5249092a639fe7e85cf9e08089ecf187eb16879f4b3ded1646660912daf313669e4367b7560b575d0e9428ef4aa0e8042a6d0c8b05ad987734a0cdbd439f1b999a53b4fa9a65a4ed56a7a35"]}, 0x13fc}, {&(0x7f0000001800)={0x18c, 0x1c, 0x420, 0x70bd27, 0x25dfdbfe, "", [@nested={0xec, 0x34, [@typed={0x8, 0x83, @pid=r3}, @generic="2e35d037e2b11c3b1e27bd6b7626621e09e633bcd4dc7ca83c5586d049a34bc1f1cdbc33e9b45c3d59b77ed2951f4a4af37d825fe1780673c30e140f29f16e346a2e6d6865f031927a88da0aea2b3513e9836a8c9a37e1f42d6cf357ffc79fa74c041220e61ef1126128515bc48ea55c0029600a531f46b3ac3ec0fb", @generic, @generic="dc0ad7143fba5cd71f27a874cd5a394a6d18e3aa201ac4c1ddd964bb892c3133da8f2f7f3884a973eeae47348fcee4d2479f292bde05f90d92cde43bf252ef4a4692d17325cee85598578b005b8345ee5fa0902bed32f0ba2a466dd1ffae2588fd"]}, @generic="963a41a6bcf85e393238b4f8a1cfc68f7a5e496996231b4be2c6f6013853fd1b29b33835761da50d206903dec1ae12ad67fc1a5185df50ff082659bc1243cbd3007515f75a2883c2fc0c97ab2ae5d598aa4bf13513fbdb6eb3b75f6a316032fb5b23df32f3e8594d0e177ae2e9f9bf5fc2a13d83708fcef927af", @generic="6320d5e71c375d535c436d12a8d5bdb3fc061b8a"]}, 0x18c}, {&(0x7f00000019c0)={0x264, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, "", [@typed={0x4, 0x61}, @nested={0x250, 0x84, [@generic="643473d9e49b693c178b9d971b9db2d92f817670e22f1981062d29741689d782e40c1d55e4b29848d4d67798b6618e8f97d611d0fa8b4e8d2fb90fdc55abe56d0818d2375f3f53382fd5225fccb5b607726e2e2275c7a8a2b05008354b27fac46faa8e96eea2ca3b290c96c06503e2dcd06b7b", @generic="94f15e3859ededa42d384d9b690c48df860f9e5dc4962bd7746be1349a458e39f87db51bba9a47904ea6048ffb130445a1c19c4df33c07e131062d9541ca3c4c4a19ccaadb9ae0c8faeee6b530173095e91ee9409c7e2471bd2d9cff8f2f047591f09db06359e45c8de4028a8f9056c765d08d289413f76c7597d05f33c47b8fad3fdf6475e89f474da43ecaad09925ed46c4c4971f471dcb66b732bd41a25", @typed={0x14, 0x5c, @str='/dev/admmidi#\x00'}, @generic="d2710b9024d42574dd20554ad30a066da5fa458ea220e81631f48d81b6380ba46b0944f96670", @typed={0x8, 0x13, @u32=0x9}, @generic="67af0ea60840a3644fa6fdfd06480f48cbdb2e0d2f58b9c8a9ab9de08538e95d0d9d3265a8ba9b3a67d1c7febe8afe348289258cdda7ce74a61f9a1732d1dd25c818f3fed7d2946dc91a67d3f987dbc844459519e4b02672c15071c10a067df4bfb777a7753d574eac3ab5abcd1a0ef82c7911d8b4314eda3fe5be5671eda72deabd4011931ccce5b15efc9cc6afa077c6355baf4a196f88bf703e47efc1f8c5038984b7f329605df11e6d4a3f5d79a7fe3f27162522b7dc7237f15cbff572378c22308d2bcf2f12aee03e7cefe39daa903fc022bf0ab15a53e32070b5e2b740b275", @typed={0x8, 0x3b, @uid=r4}, @typed={0xc, 0x31, @u64=0x6}]}]}, 0x264}], 0x4, &(0x7f0000000380)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1]}], 0x20, 0x50}, 0x8000) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 10:19:43 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x10105) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) statx(r0, &(0x7f0000000040)='./file1\x00', 0x800, 0x40, &(0x7f0000000280)) fchdir(r0) link(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) 10:19:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x9) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 617.163381][T30872] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 617.171335][T30872] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 617.179293][T30872] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:43 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x600, 0xd1) 10:19:43 executing program 5 (fault-call:1 fault-nth:28): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 617.216219][T30887] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.251816][T30896] overlayfs: './file0' not a directory 10:19:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000340)='fdinfo\x00') prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x32, 0x100) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663044004040000006340c0020000000000000001000000000000000000000001f981260000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\t\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="07630440030000000763044000000000"], 0x92, 0x0, &(0x7f0000000240)="80d0a23f99c07418bb84428c91839512f6c58c9924308df232e8a9978a774551dad908df20119d92a24f22f2a8145c7829a055ffe9fccc123e1042f280d33a5bf398a47f4cefb3e5e37377381ab3446947895040b33fcd17cb5f925e9410a0675b5eac1bf3321feadb3647dda956435468658f26a21ffe19c75fc26f485bf268ebb53f6d32c8b8900d9889ebbd459e3be9d2"}) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x400000) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000440)=0x80000004) r5 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000380)={0x1, 0x180000000000000, 0x1, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:43 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x5, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:43 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x4) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x100, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000080)=0x6849, 0x4) [ 617.333313][T30900] FAULT_INJECTION: forcing a failure. [ 617.333313][T30900] name failslab, interval 1, probability 0, space 0, times 0 [ 617.371417][T30906] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:43 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x6, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x6, 0x3, 0x180, 0x5, 0x400, 0x2}) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000080)="cd8724a518b21f5bb857671bb0f233ba94fc8e69f92513a7bb1daf742c37b411915ba4d6760232d53a1a2ad9eec4b92464efbf60ea0600000000000000423bc58a1a0967d47a1c8157e178a3fa9b43b07d") ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000400)) [ 617.373125][T30900] CPU: 1 PID: 30900 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 617.388707][T30900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.398764][T30900] Call Trace: [ 617.402067][T30900] dump_stack+0x1db/0x2d0 [ 617.406409][T30900] ? dump_stack_print_info.cold+0x20/0x20 [ 617.412133][T30900] ? __x64_sys_mount+0xbe/0x150 [ 617.416992][T30900] ? do_syscall_64+0x1a3/0x800 [ 617.421764][T30900] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 617.427859][T30900] ? print_usage_bug+0xd0/0xd0 [ 617.432637][T30900] should_fail.cold+0xa/0x14 [ 617.437239][T30900] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 617.443063][T30900] ? ___might_sleep+0x1e7/0x310 [ 617.447921][T30900] ? arch_local_save_flags+0x50/0x50 [ 617.453230][T30900] __should_failslab+0x121/0x190 [ 617.454629][T30915] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.458172][T30900] should_failslab+0x9/0x14 [ 617.458190][T30900] kmem_cache_alloc_trace+0x2d1/0x760 [ 617.458214][T30900] __memcg_init_list_lru_node+0xef/0x2e0 10:19:43 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x7, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 617.481912][T30900] ? kvfree_rcu+0x20/0x20 [ 617.486254][T30900] ? __kmalloc_node+0x4e/0x70 [ 617.490945][T30900] __list_lru_init+0x4d9/0x850 [ 617.495722][T30900] ? list_lru_destroy+0x520/0x520 [ 617.500756][T30900] ? down_read+0x120/0x120 [ 617.505180][T30900] ? init_wait_entry+0x1c0/0x1c0 [ 617.509728][T30919] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.510120][T30900] ? prealloc_shrinker+0xdf/0x340 [ 617.510143][T30900] alloc_super+0x8c3/0xa10 [ 617.510163][T30900] ? destroy_unused_super.part.0+0x110/0x110 10:19:43 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x8, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 617.533807][T30900] sget_userns+0x164/0x6c0 [ 617.538249][T30900] ? get_anon_bdev+0xc0/0xc0 [ 617.542873][T30900] ? vfs_get_super+0x260/0x260 [ 617.547648][T30900] ? security_capable+0x9b/0xd0 [ 617.552599][T30900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 617.553224][T30922] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.558850][T30900] ? ns_capable_common+0x93/0x100 [ 617.558872][T30900] ? get_anon_bdev+0xc0/0xc0 [ 617.558887][T30900] sget+0x10c/0x150 10:19:43 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x9, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 617.558905][T30900] ? ovl_show_options+0x550/0x550 [ 617.558920][T30900] mount_nodev+0x31/0x110 [ 617.558938][T30900] ovl_mount+0x2d/0x40 [ 617.593956][T30900] ? ovl_own_xattr_set+0x10/0x10 [ 617.598908][T30900] legacy_get_tree+0xf2/0x200 [ 617.602360][T30925] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.603618][T30900] vfs_get_tree+0x123/0x450 [ 617.603640][T30900] do_mount+0x1622/0x2fa0 [ 617.603664][T30900] ? copy_mount_string+0x40/0x40 [ 617.625628][T30900] ? kmem_cache_alloc_trace+0x354/0x760 [ 617.631182][T30900] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 617.637432][T30900] ? _copy_from_user+0xdd/0x150 [ 617.642299][T30900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 617.648549][T30900] ? copy_mount_options+0x30e/0x440 [ 617.653750][T30900] ksys_mount+0xdb/0x150 [ 617.657985][T30900] __x64_sys_mount+0xbe/0x150 [ 617.662675][T30900] do_syscall_64+0x1a3/0x800 [ 617.667256][T30900] ? syscall_return_slowpath+0x5f0/0x5f0 [ 617.672872][T30900] ? prepare_exit_to_usermode+0x232/0x3b0 [ 617.678585][T30900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 617.684126][T30900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 617.689999][T30900] RIP: 0033:0x458099 [ 617.693876][T30900] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 617.713465][T30900] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 617.721869][T30900] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:43 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) 10:19:43 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xa, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 617.729865][T30900] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 617.737827][T30900] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 617.745781][T30900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 617.753745][T30900] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 617.786336][T30908] overlayfs: './file0' not a directory [ 617.797842][T30927] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:43 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x804, 0xd1) 10:19:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:43 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000080)=""/38) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:43 executing program 5 (fault-call:1 fault-nth:29): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 617.844820][T30927] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.884298][T30935] FAULT_INJECTION: forcing a failure. 10:19:43 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xb, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 617.884298][T30935] name failslab, interval 1, probability 0, space 0, times 0 [ 617.889437][T30932] overlayfs: './file0' not a directory [ 617.919475][T30935] CPU: 1 PID: 30935 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 617.928535][T30935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.938597][T30935] Call Trace: 10:19:43 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$netrom(r0, &(0x7f0000000040)={{0x3, @netrom}, [@null, @netrom, @bcast, @default, @null, @bcast, @default, @default]}, &(0x7f00000000c0)=0x48) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)=0x10000) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000040)=""/75, 0x4b, 0x10020, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) 10:19:43 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0xffffffffffffff02, 0xfa00, {0xffffffffffffffff, 0x0, 0x111}}, 0x20) [ 617.941903][T30935] dump_stack+0x1db/0x2d0 [ 617.946255][T30935] ? dump_stack_print_info.cold+0x20/0x20 [ 617.951991][T30935] ? __x64_sys_mount+0xbe/0x150 [ 617.956849][T30935] ? do_syscall_64+0x1a3/0x800 [ 617.961617][T30935] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 617.967694][T30935] ? print_usage_bug+0xd0/0xd0 [ 617.972471][T30935] should_fail.cold+0xa/0x14 [ 617.977062][T30935] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 617.982863][T30935] ? ___might_sleep+0x1e7/0x310 [ 617.987705][T30935] ? arch_local_save_flags+0x50/0x50 [ 617.992993][T30935] __should_failslab+0x121/0x190 [ 617.997917][T30935] should_failslab+0x9/0x14 [ 618.002408][T30935] kmem_cache_alloc_trace+0x2d1/0x760 [ 618.007768][T30935] __memcg_init_list_lru_node+0xef/0x2e0 [ 618.013399][T30935] ? kvfree_rcu+0x20/0x20 [ 618.017709][T30935] ? __kmalloc_node+0x4e/0x70 [ 618.022371][T30935] __list_lru_init+0x4d9/0x850 [ 618.027122][T30935] ? list_lru_destroy+0x520/0x520 [ 618.032130][T30935] ? down_read+0x120/0x120 [ 618.036533][T30935] ? init_wait_entry+0x1c0/0x1c0 [ 618.041457][T30935] ? prealloc_shrinker+0xdf/0x340 [ 618.046468][T30935] alloc_super+0x8c3/0xa10 [ 618.050872][T30935] ? destroy_unused_super.part.0+0x110/0x110 [ 618.056844][T30935] sget_userns+0x164/0x6c0 [ 618.061246][T30935] ? get_anon_bdev+0xc0/0xc0 [ 618.065822][T30935] ? vfs_get_super+0x260/0x260 [ 618.070568][T30935] ? security_capable+0x9b/0xd0 [ 618.075404][T30935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 618.081626][T30935] ? ns_capable_common+0x93/0x100 [ 618.086664][T30935] ? get_anon_bdev+0xc0/0xc0 [ 618.091238][T30935] sget+0x10c/0x150 [ 618.095034][T30935] ? ovl_show_options+0x550/0x550 [ 618.100053][T30935] mount_nodev+0x31/0x110 [ 618.104368][T30935] ovl_mount+0x2d/0x40 [ 618.108429][T30935] ? ovl_own_xattr_set+0x10/0x10 [ 618.113388][T30935] legacy_get_tree+0xf2/0x200 [ 618.118050][T30935] vfs_get_tree+0x123/0x450 [ 618.123062][T30935] do_mount+0x1622/0x2fa0 [ 618.127379][T30935] ? copy_mount_string+0x40/0x40 [ 618.132313][T30935] ? kmem_cache_alloc_trace+0x354/0x760 [ 618.137845][T30935] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 618.144069][T30935] ? _copy_from_user+0xdd/0x150 [ 618.148905][T30935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 618.155128][T30935] ? copy_mount_options+0x30e/0x440 [ 618.160314][T30935] ksys_mount+0xdb/0x150 [ 618.164546][T30935] __x64_sys_mount+0xbe/0x150 [ 618.169213][T30935] do_syscall_64+0x1a3/0x800 [ 618.173797][T30935] ? syscall_return_slowpath+0x5f0/0x5f0 [ 618.179425][T30935] ? prepare_exit_to_usermode+0x232/0x3b0 [ 618.185143][T30935] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 618.190679][T30935] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 618.196555][T30935] RIP: 0033:0x458099 [ 618.200435][T30935] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 618.220033][T30935] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 618.228432][T30935] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 618.236384][T30935] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 618.244338][T30935] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 618.252293][T30935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 618.260250][T30935] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:44 executing program 5 (fault-call:1 fault-nth:30): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:44 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) [ 618.352032][T30951] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 618.383317][T30957] FAULT_INJECTION: forcing a failure. [ 618.383317][T30957] name failslab, interval 1, probability 0, space 0, times 0 [ 618.403051][T30957] CPU: 0 PID: 30957 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 618.404884][T30958] overlayfs: './file0' not a directory [ 618.412093][T30957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.412104][T30957] Call Trace: [ 618.430898][T30957] dump_stack+0x1db/0x2d0 [ 618.435242][T30957] ? dump_stack_print_info.cold+0x20/0x20 [ 618.440972][T30957] ? __x64_sys_mount+0xbe/0x150 [ 618.444382][T30960] overlayfs: './file0' not a directory [ 618.445827][T30957] ? do_syscall_64+0x1a3/0x800 [ 618.445846][T30957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 618.445863][T30957] ? print_usage_bug+0xd0/0xd0 [ 618.445886][T30957] should_fail.cold+0xa/0x14 [ 618.445907][T30957] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 618.445931][T30957] ? ___might_sleep+0x1e7/0x310 [ 618.445945][T30957] ? arch_local_save_flags+0x50/0x50 [ 618.445968][T30957] __should_failslab+0x121/0x190 [ 618.492463][T30957] should_failslab+0x9/0x14 [ 618.497410][T30957] kmem_cache_alloc_trace+0x2d1/0x760 10:19:44 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file1\x00', 0x2, 0xa, &(0x7f00000008c0)=[{&(0x7f0000000240)="ee12019e1a41342825c1494a422d8a87976c68669db33c732f427438cb3c1c69b48d7e206d2ed14b24c9a96b1d303e148f011fedad0e48bf759c9733957c7170336e68928420d0325a0249670178d528b9c6266bc4484112c018f1e10e9cb25b23360c816c796615e1c7eb1cee367d56cb0947fa9e65cc7e4714305bc73aad25bd661256b98ad6c1b5551aaac30ae074fc89a00afb0992f35104cf477279c6d3e74406dc0cc21b80cd5e037a264df1308410889299047b5d87bb93cfca36beedec99792c95508bf07bbd7f9fe309d0951ad62312ebdbf0ab4b3191dbd534384a828832229d2bcf47ed6e7b9e30fbd6856a97d5261a579a1b589af331", 0xfc, 0x8001}, {&(0x7f0000000340)="11f3b79db2ec6ac47e92d9ae39966968acccb0f8ccefe22f13f6f2d2c1f9f567ea03b8382e9f405a6598a2b13346c6322d2cb5e6cb15a12b9052172ba5b3cd6a60bc437026c82886188dcb67f3b7f23bca89a0ea0359f3e3626816", 0x5b, 0x1}, {&(0x7f00000000c0)="150eaa5ae34256228609e6", 0xb, 0x7}, {&(0x7f00000003c0)="031d8f62285588360d5c7aea3548b87ecaa28343def60a89e515757a26c6e0b85538711e54e762aa3dafd6449ffc93cd34e08cacbc6914bdbe1ef502510a450ac6bc2f30687fc981b63957258d30208deee2a78405c21d57625c8906a6d32743f7f4d7a3a85bcf2f9fdfab5f95b9b6264e3f056d30f89a860850a9c20844629ab17bd7bcf80f569ed997f61b93ecb2e31e2683a527787b1f193c1e9dcbffd37096069db5c0d316c1ca2de036409041c742db03a211d6df39912fe0", 0xbb}, {&(0x7f0000000480)="b05bdaa53689ad0af9fcae44cff48fca4658f0a5c293df2106208f328a1934cbf98887157bdd6892d13370f2af62334d9b206eea0083695f7917c58a3a5882e2251f5ec0d61487074be001e21279656f3bc0a13de48a56fb0a8932f4bd5516fe38ffb54f2979f2779a964b5920e202bc3ae9f47ca129d0a9741e86b2bcacbe15ef285e178c4bc9408b6e6966ec0df5e3aa66aebf4bd3c9b1d8bdf20b7734be4aa9e1322b7f846ab81614dc68897c5ea1b8e1841d5859cfaadbb4f1880bbbf695b27e3403dfdf8ce55c", 0xc9, 0x2}, {&(0x7f0000000140)="a225ae299467276b30fa97f0746e76edf1b9631464149846d26f29bb7b90f035eaa78656eeece4dd18bb27ec", 0x2c, 0x37e}, {&(0x7f0000000580)="6cb3cc0b3927381a47b6f9ac31600fce5ed3255196ca9c6ae8c19b2ce6c167ef9beb7d181347cf3d059e8f781b61c3b474d2fa7e0020ea7b51167daf1760bdc17d5fc7641a7dc268f8c33c8ab800710a5b4e39790db7c9dd8e069acc12b9688a3e23656b467665e3", 0x68, 0x3}, {&(0x7f0000000640)="1d30e4b3641feb43233cf5a09d520b7e990534318a299cc06606a157454ae52173297c70225c1922ef2b8546d3bb37f55830439b0d05aa8a42d7418d88d73cb4659ae0333ddabc21deb5cfc00cc9e7c79508a5ef7ab085553f9c82416ee848c19efd82e8ad762493d77dcd5c0aa578aa4aa17f91bd2bb77d62501e71f77c806cc771224c794350ff7285c7d9920256858dcc903cae75de132ab25e8be03075e261b81576d54f9cc2ea951e73f2bc88ffe96555efb83d48", 0xb7, 0xc1}, {&(0x7f0000000700)="812bba894818e6b76644a354504c31238ee254083b0e41e82d5754b98f86f79a4ef15dc9a6b0c648da32a81e1730ee891f14544ae8bdddac59a8d55f8b72d54c47ab4444f59dd09099af17c60c65085e1faf02182457ce4e7771d8160f87528fe8f97e4cf61464f442492cc1b60521faa97b745d72056f92875e6645e8109fc14b543acdce01c3ffa0410f4042d801b6a7dd35767e96fa9f239befb9b5886a10983e7cc4752c6d3114558baaa08675938bdf88f05114623189bb28340bcaf04c74fc793c83c9a3ec3cacf900a322fb05d780873629e1cccc5d143da95eaf5aaf", 0xe0, 0xf24}, {&(0x7f0000000800)="65dcbfe410546f461581555e605d60163843221b50f02655954f86a8b1b624a88226cad7087678c8fe29b2039377a79b2e4adaa63a1e076cfb0f3028e9b3414b078c93ebde5f0602bd6903cee9e08f912b54507840bce8f239a5e0b25a47951a4401454cd9c4e733285d573c6d0d95383f8fe16e29bcd2f2aa801845424aa08def882d7044140c48c0e36673d6cdec0586b779b6772b55f7b5ed6a2ace4c218df93357a17929ff6fb9a6134567a71ddfc55fcdc38f1fe78c9099966ada1edc", 0xbf}], 0x100000, &(0x7f00000009c0)={[{@force='force'}], [{@obj_role={'obj_role', 0x3d, 'overlay\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_type={'subj_type'}}, {@dont_measure='dont_measure'}]}) mkdir(&(0x7f00000001c0)='./file1\x00', 0xcd) r0 = creat(&(0x7f0000000a40)='./file1\x00', 0x84) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x20, &(0x7f0000000100)=ANY=[@ANYBLOB='}pperdir=./file0,lowerdir=./file0,workdir=./file1\\\x00']) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000a80)={0xa, @pix={0x800, 0x4, 0x61777779, 0x7, 0x7f8, 0x100000000, 0x3, 0x2, 0x1, 0xf}}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 10:19:44 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 618.502816][T30957] __memcg_init_list_lru_node+0xef/0x2e0 [ 618.508461][T30957] ? kvfree_rcu+0x20/0x20 [ 618.512805][T30957] ? __kmalloc_node+0x4e/0x70 [ 618.517498][T30957] __list_lru_init+0x4d9/0x850 [ 618.522273][T30957] ? list_lru_destroy+0x520/0x520 [ 618.527307][T30957] ? down_read+0x120/0x120 [ 618.531730][T30957] ? init_wait_entry+0x1c0/0x1c0 [ 618.536689][T30957] ? prealloc_shrinker+0xdf/0x340 [ 618.541756][T30957] alloc_super+0x8c3/0xa10 [ 618.546190][T30957] ? destroy_unused_super.part.0+0x110/0x110 [ 618.552198][T30957] sget_userns+0x164/0x6c0 [ 618.556641][T30957] ? get_anon_bdev+0xc0/0xc0 [ 618.561239][T30957] ? vfs_get_super+0x260/0x260 [ 618.566011][T30957] ? security_capable+0x9b/0xd0 [ 618.570871][T30957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 618.577113][T30957] ? ns_capable_common+0x93/0x100 [ 618.582151][T30957] ? get_anon_bdev+0xc0/0xc0 [ 618.586765][T30957] sget+0x10c/0x150 [ 618.590587][T30957] ? ovl_show_options+0x550/0x550 [ 618.595628][T30957] mount_nodev+0x31/0x110 [ 618.599973][T30957] ovl_mount+0x2d/0x40 [ 618.604048][T30957] ? ovl_own_xattr_set+0x10/0x10 [ 618.608994][T30957] legacy_get_tree+0xf2/0x200 [ 618.613685][T30957] vfs_get_tree+0x123/0x450 [ 618.618199][T30957] do_mount+0x1622/0x2fa0 [ 618.622542][T30957] ? copy_mount_string+0x40/0x40 [ 618.627492][T30957] ? kmem_cache_alloc_trace+0x354/0x760 [ 618.633032][T30957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 618.639255][T30957] ? _copy_from_user+0xdd/0x150 [ 618.644091][T30957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 618.650402][T30957] ? copy_mount_options+0x30e/0x440 [ 618.655586][T30957] ksys_mount+0xdb/0x150 [ 618.659822][T30957] __x64_sys_mount+0xbe/0x150 [ 618.664480][T30957] do_syscall_64+0x1a3/0x800 [ 618.669070][T30957] ? syscall_return_slowpath+0x5f0/0x5f0 [ 618.674702][T30957] ? prepare_exit_to_usermode+0x232/0x3b0 [ 618.680415][T30957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 618.685963][T30957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 618.691845][T30957] RIP: 0033:0x458099 [ 618.695729][T30957] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 618.715316][T30957] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 618.723709][T30957] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 618.731675][T30957] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 618.739629][T30957] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:44 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x900, 0xd1) 10:19:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x4}, @acquire, @acquire_done={0x40106309, r2, 0x3}, @enter_looper, @acquire={0x40046305, 0x1}, @register_looper], 0xd, 0x0, &(0x7f0000000140)="81528575cc6f434d9bc9e42b59"}) 10:19:44 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xc, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) pipe2$9p(&(0x7f0000000000), 0x80800) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000001c0)=""/233, &(0x7f0000000040)=0xe9) [ 618.747590][T30957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 618.755578][T30957] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:44 executing program 5 (fault-call:1 fault-nth:31): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 618.818849][T30970] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:44 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x1, 0x2b9, 0x1f, 0x6, 0x14, 0x9}) ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) [ 618.884254][T30986] overlayfs: './file0' not a directory 10:19:44 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x50) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x3, 0x8001, 0x8, 0x9, 0x1f, 0x7fffffff, 0x1, 0x3f, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r1, 0x80000000}, 0x8) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000080)=0x1, 0x4) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000280)) write$binfmt_aout(r3, 0x0, 0x0) 10:19:44 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101400, 0x0) write$P9_RWRITE(r0, &(0x7f0000000080)={0xb, 0x77, 0x1, 0x86}, 0xb) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) write$FUSE_ENTRY(r0, &(0x7f0000000280)={0x90, 0x0, 0x2, {0x4, 0x0, 0x0, 0x3, 0x950e, 0x100000, {0x6, 0xa4c3, 0x6, 0xe67f, 0xe87, 0x9, 0x8001, 0x7, 0x6b, 0xfffffffffffffffd, 0x7, r1, r2, 0x0, 0x4}}}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x8, 0x2) ioctl$int_out(r3, 0x5460, &(0x7f0000000000)) 10:19:44 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xd, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 618.927523][T30988] FAULT_INJECTION: forcing a failure. [ 618.927523][T30988] name failslab, interval 1, probability 0, space 0, times 0 [ 618.983158][T30988] CPU: 0 PID: 30988 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 618.992219][T30988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.002276][T30988] Call Trace: [ 619.005580][T30988] dump_stack+0x1db/0x2d0 [ 619.009924][T30988] ? dump_stack_print_info.cold+0x20/0x20 [ 619.015657][T30988] ? __x64_sys_mount+0xbe/0x150 [ 619.020532][T30988] ? do_syscall_64+0x1a3/0x800 [ 619.025305][T30988] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 619.031381][T30988] ? print_usage_bug+0xd0/0xd0 [ 619.031720][T30998] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 619.036154][T30988] should_fail.cold+0xa/0x14 [ 619.036175][T30988] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 619.036196][T30988] ? ___might_sleep+0x1e7/0x310 [ 619.036209][T30988] ? arch_local_save_flags+0x50/0x50 [ 619.036229][T30988] __should_failslab+0x121/0x190 [ 619.036244][T30988] should_failslab+0x9/0x14 [ 619.036255][T30988] kmem_cache_alloc_trace+0x2d1/0x760 [ 619.036274][T30988] __memcg_init_list_lru_node+0xef/0x2e0 [ 619.036287][T30988] ? kvfree_rcu+0x20/0x20 [ 619.036298][T30988] ? __kmalloc_node+0x4e/0x70 [ 619.036313][T30988] __list_lru_init+0x4d9/0x850 [ 619.036326][T30988] ? list_lru_destroy+0x520/0x520 [ 619.036341][T30988] ? down_read+0x120/0x120 [ 619.036357][T30988] ? init_wait_entry+0x1c0/0x1c0 [ 619.036377][T30988] ? prealloc_shrinker+0xdf/0x340 [ 619.101090][T31002] overlayfs: './file0' not a directory [ 619.104230][T30988] alloc_super+0x8c3/0xa10 10:19:45 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) 10:19:45 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xc00, 0xd1) 10:19:45 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3a, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 619.104252][T30988] ? destroy_unused_super.part.0+0x110/0x110 [ 619.134427][T30988] sget_userns+0x164/0x6c0 [ 619.138853][T30988] ? get_anon_bdev+0xc0/0xc0 [ 619.143448][T30988] ? vfs_get_super+0x260/0x260 [ 619.148217][T30988] ? security_capable+0x9b/0xd0 [ 619.153079][T30988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 619.159326][T30988] ? ns_capable_common+0x93/0x100 [ 619.164361][T30988] ? get_anon_bdev+0xc0/0xc0 [ 619.169041][T30988] sget+0x10c/0x150 [ 619.172857][T30988] ? ovl_show_options+0x550/0x550 [ 619.177882][T30988] mount_nodev+0x31/0x110 10:19:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x400) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={r3, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, [0x4, 0x9, 0x401, 0x10000, 0xe93, 0x1, 0x400, 0x1000000000000, 0x1000, 0x8, 0x6, 0xfffffffffffffffe, 0x8, 0x8, 0x100]}, &(0x7f0000000200)=0x100) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") fchdir(r0) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x3, 0x8000000006) [ 619.182216][T30988] ovl_mount+0x2d/0x40 [ 619.186297][T30988] ? ovl_own_xattr_set+0x10/0x10 [ 619.191240][T30988] legacy_get_tree+0xf2/0x200 [ 619.195928][T30988] vfs_get_tree+0x123/0x450 [ 619.200442][T30988] do_mount+0x1622/0x2fa0 [ 619.204789][T30988] ? copy_mount_string+0x40/0x40 [ 619.209746][T30988] ? kmem_cache_alloc_trace+0x354/0x760 [ 619.215301][T30988] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 619.221549][T30988] ? _copy_from_user+0xdd/0x150 [ 619.226412][T30988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 10:19:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)={0x7, 0x0, [{0x8, 0x1, 0x0, 0x0, @msi={0x2a4, 0x6, 0x7f26}}, {0x400, 0x3, 0x0, 0x0, @irqchip={0xc44e}}, {0x4, 0x0, 0x0, 0x0, @msi={0x4d, 0xb01f, 0x2}}, {0x33, 0x3, 0x0, 0x0, @adapter={0x401, 0x2, 0xfffffffffffff801, 0x7, 0x1}}, {0x8, 0x1, 0x0, 0x0, @sint={0x1f, 0x3f}}, {0x6, 0x6, 0x0, 0x0, @msi={0x4, 0x10000, 0xa1}}, {0x3, 0x0, 0x0, 0x0, @msi={0x3, 0x400, 0x8c4f}}]}) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) [ 619.232660][T30988] ? copy_mount_options+0x30e/0x440 [ 619.237898][T30988] ksys_mount+0xdb/0x150 [ 619.242152][T30988] __x64_sys_mount+0xbe/0x150 [ 619.246839][T30988] do_syscall_64+0x1a3/0x800 [ 619.251443][T30988] ? syscall_return_slowpath+0x5f0/0x5f0 [ 619.257088][T30988] ? prepare_exit_to_usermode+0x232/0x3b0 [ 619.262823][T30988] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 619.268390][T30988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 619.274286][T30988] RIP: 0033:0x458099 10:19:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 619.278199][T30988] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 619.297809][T30988] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 619.306229][T30988] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 619.314200][T30988] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 619.322174][T30988] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:45 executing program 5 (fault-call:1 fault-nth:32): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:45 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x48, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 619.330150][T30988] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 619.338126][T30988] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 619.396330][T31018] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 619.417713][T31021] FAULT_INJECTION: forcing a failure. [ 619.417713][T31021] name failslab, interval 1, probability 0, space 0, times 0 [ 619.471741][T31021] CPU: 0 PID: 31021 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 619.480799][T31021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.490862][T31021] Call Trace: [ 619.494169][T31021] dump_stack+0x1db/0x2d0 [ 619.498518][T31021] ? dump_stack_print_info.cold+0x20/0x20 [ 619.504252][T31021] ? __x64_sys_mount+0xbe/0x150 [ 619.509112][T31021] ? do_syscall_64+0x1a3/0x800 [ 619.511036][T31028] overlayfs: filesystem on './file0' not supported as upperdir [ 619.513882][T31021] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 619.513901][T31021] ? print_usage_bug+0xd0/0xd0 [ 619.513929][T31021] should_fail.cold+0xa/0x14 [ 619.536869][T31021] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 619.542708][T31021] ? ___might_sleep+0x1e7/0x310 [ 619.547592][T31021] ? arch_local_save_flags+0x50/0x50 [ 619.552893][T31021] __should_failslab+0x121/0x190 [ 619.557840][T31021] should_failslab+0x9/0x14 [ 619.562364][T31021] kmem_cache_alloc_trace+0x2d1/0x760 10:19:45 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x4c, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:45 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$apparmor_current(r1, &(0x7f0000000000)=@profile={'changeprofile ', '/dev/admmidi#\x00'}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 619.567775][T31021] __memcg_init_list_lru_node+0xef/0x2e0 [ 619.573421][T31021] ? kvfree_rcu+0x20/0x20 [ 619.577762][T31021] ? __kmalloc_node+0x4e/0x70 [ 619.582454][T31021] __list_lru_init+0x4d9/0x850 [ 619.587228][T31021] ? list_lru_destroy+0x520/0x520 [ 619.592255][T31021] ? down_read+0x120/0x120 [ 619.596701][T31021] ? init_wait_entry+0x1c0/0x1c0 [ 619.601665][T31021] ? prealloc_shrinker+0xdf/0x340 [ 619.606723][T31021] alloc_super+0x8c3/0xa10 [ 619.610134][T31033] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:45 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x5c, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 619.611149][T31021] ? destroy_unused_super.part.0+0x110/0x110 [ 619.611184][T31021] sget_userns+0x164/0x6c0 [ 619.611206][T31021] ? get_anon_bdev+0xc0/0xc0 [ 619.634386][T31021] ? vfs_get_super+0x260/0x260 [ 619.639154][T31021] ? security_capable+0x9b/0xd0 [ 619.644014][T31021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 619.650254][T31021] ? ns_capable_common+0x93/0x100 [ 619.655294][T31021] ? get_anon_bdev+0xc0/0xc0 [ 619.659893][T31021] sget+0x10c/0x150 [ 619.663714][T31021] ? ovl_show_options+0x550/0x550 [ 619.668785][T31021] mount_nodev+0x31/0x110 [ 619.672798][T31037] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 619.673123][T31021] ovl_mount+0x2d/0x40 [ 619.673139][T31021] ? ovl_own_xattr_set+0x10/0x10 [ 619.673156][T31021] legacy_get_tree+0xf2/0x200 [ 619.673180][T31021] vfs_get_tree+0x123/0x450 [ 619.699535][T31021] do_mount+0x1622/0x2fa0 [ 619.703880][T31021] ? copy_mount_string+0x40/0x40 [ 619.708827][T31021] ? kmem_cache_alloc_trace+0x354/0x760 [ 619.714378][T31021] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 619.720621][T31021] ? _copy_from_user+0xdd/0x150 [ 619.725499][T31021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 619.731744][T31021] ? copy_mount_options+0x30e/0x440 [ 619.736951][T31021] ksys_mount+0xdb/0x150 [ 619.741203][T31021] __x64_sys_mount+0xbe/0x150 [ 619.745891][T31021] do_syscall_64+0x1a3/0x800 [ 619.750489][T31021] ? syscall_return_slowpath+0x5f0/0x5f0 [ 619.756141][T31021] ? prepare_exit_to_usermode+0x232/0x3b0 [ 619.761867][T31021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 619.767399][T31021] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 619.773283][T31021] RIP: 0033:0x458099 [ 619.777164][T31021] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 619.796782][T31021] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 619.805195][T31021] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 619.813188][T31021] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 619.821151][T31021] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 619.829122][T31021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 619.837407][T31021] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:45 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xd00, 0xd1) 10:19:45 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x60, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') timerfd_gettime(r2, &(0x7f0000000080)) accept4(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000140)=0x80, 0x80800) 10:19:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:45 executing program 5 (fault-call:1 fault-nth:33): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 619.919453][T31047] FAULT_INJECTION: forcing a failure. [ 619.919453][T31047] name failslab, interval 1, probability 0, space 0, times 0 [ 619.970918][T31054] overlayfs: './file0' not a directory [ 619.978465][T31047] CPU: 1 PID: 31047 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 619.987507][T31047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 619.998092][T31047] Call Trace: [ 620.001394][T31047] dump_stack+0x1db/0x2d0 [ 620.005735][T31047] ? dump_stack_print_info.cold+0x20/0x20 [ 620.011461][T31047] ? __list_lru_init+0x3f4/0x850 [ 620.016421][T31047] should_fail.cold+0xa/0x14 10:19:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = dup3(r1, r0, 0x80000) ioctl$VT_RELDISP(r2, 0x5605) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x861247259cf60395) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:45 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c7f202c6c6f776572641b2dfb3bea2cbb6f65302c776f726b6469723d2e2f66696c65315c006688062df526d2bd7d5ad9977e3ed42e325c0b85264671e68ad2dd550f2f34be9d4e63e5a115c136a25a399c318dda"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 620.021020][T31047] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 620.026841][T31047] ? ___might_sleep+0x1e7/0x310 [ 620.031704][T31047] ? arch_local_save_flags+0x50/0x50 [ 620.036998][T31047] ? __mutex_unlock_slowpath+0x195/0x870 [ 620.042655][T31047] __should_failslab+0x121/0x190 [ 620.047603][T31047] should_failslab+0x9/0x14 [ 620.052123][T31047] __kmalloc+0x2dc/0x740 [ 620.056380][T31047] ? __list_lru_init+0x13f/0x850 [ 620.061324][T31047] __list_lru_init+0x13f/0x850 [ 620.066098][T31047] ? list_lru_destroy+0x520/0x520 10:19:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10100, 0x0) getpeername$tipc(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000100)="3865b431641239ec5e5c0a95a0c62c6a0f26a78be504a1a2d266498a3fca5b0e11af8ba62684c01ffd747025e288d5767b6b96679c7982405adde5b2a0ea6b4019f3037bc42377fb11fdd1c7f1caeedb83f2875e7630a7decb48a0e5c4cc6193672871eba00d41ff7e089f9c32c26680895ce5156a54656b934ce9a945c82505114b943b840db71c6fc0b16c597b5de56fc0679d8fc5d2fe4c7a4c2f784633ee056e25143431c131e92d44d7ebb2275d0cf1640bc739d569bbf50200bfa5f09ebb0fa867d63fe6f560b7d560a767e081293dc01264be230f03b90afc9d0bc087cbbe33b9e3d19c6657a4a1f9ebe2a2992d8603e89bc68a62de7b027b3184451ebd9e67ebe2b0ff19cb646649cc5621ff8f12171be2fe1db202c3a00cdc0ed49f27f2f2224a5648be5a1f10711c824bd0eff5144e53c4d6e63bd027fef5ea177517585d3a4a325002651569993f7f43e2f40b7e27eb5ab4e94ee511ae730c6c2a61e2e912ac439e53ce19ce88f2bfa9afa1b42c47ee51d1d4ee08acdcc4359a6eeb75ef32511df34b5d3ea93b7edb4645e2e2bc5cdc4043e1c3ecf5e45eec12cbc3a3d7338ea0cf8aa93361c89b30264ce353866b3305fc7f579e6fedc88f79493a9006a9cf3d130372c3f2cdd25da4b8998ff08701ba62e855f011bdfe40894f980a866cda6c4e77413d75b038f78ea69d2f08bce97365cebe3916ec861c1f5313f6bf95be57c035744a624017ff47be2437d5fb749d99784a978ccf5e6f7c7d2fce33aa09f5d03dd4d0877b6cc441b88efde1f9708325023322d4fa64c8ab28e9e18eb4249183af452f4d85d0ba9cfc3b80d22e3281946557714134bb4d3e7c47a93de33a24461245587bb174a0777b50086ece174de570ba17a40e534dcebb5f2d5b52ccaf71ce495f2e8f6499ab15da81dc8cabd35d4e2842f04926ea1c6038e65d8180543b55df95b4e7ae4dc896be4b024d63357f9bd34a182595fcc38d74553e277974057a87f73aa1b02f1002a620a670fe35a8a64f5c6c3895f763b6032ecb7594b8d6d2a8065d6a395b25f90fffa81632ad6a9bf28e6ceef76ce59414c3443ceeaaa54efb0210019fad792c45780186ce94c17b2a764b21e6079e03cdcc9fab3a5a93fa2f1ff733373ef0a6baf0e097682d05d4f6decc24862c4c0d76c1b6c5cb0dea7ca7d51cc0dd0662d8afecc9297aaff3622a48aa7e0916d8599ba36bb4de329b60c9bdbb0e8bdc4ccd8e5ec41fe158d748d6e66557c0493f9e6d432ab8255f0b4090ca89c0909f1dbdb0737cae16a295ac9f715e23797c0fc36e37bc27bffbd6c36392dc30c869cc106cb70d49db343d893af04328f41b772978a75eae9102894db4a2d20be53fac6542a09d2c784a49f48334d3fed74b9efb789652f78df18006e5f898eb14dc3c4698c08ba8b5d89a9abe9eeabb574b27e99de63337b6023713cf5357081f1db8c9e79b2e7742ea29fdec6bf0d99118f7b4bc4c21d0c4e297333e1d431d7f8bbf3893be53a0659d42e8eb41ddf574c08d88b1415cba03b7a447116b8f051c14d3e93c7f7d9f3830dba8b6bec1a2dcfc5a76ce6e8288803ae467ad8d89c17e50d4fd90709edf5278aae5f7568d197d075a7c9cc109cd15b295ab185d62d21b0202cd9c4f3d9b3c4a623f6264c4ed893bc8079f3f27a13f9a52dbdbecf62fde15794b444065efa953612d35a5c6987d06e513baa99a476d224783e2b5a2b8c86b97c831e67675fb7672446458b02658b3fa0c939df369dbe9199254b2c338988260797d5423fecbeb3fa949d542bed5303d752cf6420bfcf02d792f728599091fe2e5359f34976d369d0b5de779ed05e2ab2d1f25c2a7ec4864b1f4270da109a11a9ed562bc20056d89e790ab56d914e241c3665f33e8593c6febef48ac165199ba9d8859578f676e5397d57e5a867102a9e8ac81bc6b4add7ed7abc7c060505628a0eed0f5511c41b50fdef8ae6fc91c54a2c9301cd83ae672da05ef89c4586ead146c7c5971fa1b868b8ae582e8fe670f798e521408a826c60a157e25a2f4eb1477f46868a25033fc7d23866bff45b76e14eeaff5442244b32aebf0b35175cad474717ec97ca0446a1d69470d6201070a050b5c9f9bd407b7020eee1941c67671ab7f0f4c090c7195b903b3d53cb5a746cfb13a7ce2f9a1afa33b25060b27a141a92c3a3f1e3f3a796869729a7ab580495a8d934dc599f78352ae30f25e2cb248eecebd523af2353ce8e5c825e4eca79d933428594a1186736ee028976ab65129da83f207e8c1f3d62d89da03036279835783bc900e919f8222eb2d8679a429cc9083daf8fe5574da6b429ba05178470be5ec0fa0ba33b475f42d22162efa8955e7601dd082757ccf5d1be2e5fe85e6f75f55c9375c299f6298f719ea9efdd1504cf80cf24c3883ce7cc8d621019f4e61e3e676f0e9dc359aa90aac48ea501ab4ff858c8f48bccd2aab80780a3058cf4671367a4bdf2e35f0837bcc19286404d4a65449f7dbe637471967d3dba27c8e7e10eaa7b08ba45e4c70a6f9e2b3522ef38a0f172a25355acfe44801bd83120db5fb52c682ad4087bd5b1e0c2b63e54c497a410309493c0c3be8ab5e574b1227bedb8cc1262e230cc7919aa900be674d211be858262536512fbc4422e66d9af3c656d0c5fd03d8ef6c06a00f730c23445eb8f7b753fd442eabe009641a8c5c5056ecb64582e546ba26cf924f3caaf393e5e047a830a627bc9b06a083fc2a113c4cbc4793062abee467bea6c7f9379740837fb8ad589fcb7c363816519f5ba0a6bafdcdb4783c2ab75b794388377158c8ef4fb3dcc70d2a924579a1b91b1107a5bd7d2fa164ca2e2fa72f9a0a3d629f06e3b3ed8fec46fab5c17a68fdb41890747d63f86851a002ac415c988c76cf8d91057278534a01bea0db6ff611f9286bc043e13a045b4c6ae985bad5fb52324de78226791c4322f1aba427a32b6e2d6af05155d6e19fde50f30e49d6c49f1dc283d33eead8cb339fb8c5cb4470e6b665ad1cd255643a20c6e5f56be14a2d0e0edb9df29010e33d3d5157d6793b89298d6c9feb4c457dedf4c7815911fcc3463ea43e24a9087f741a83a20b97b734285191261a09a1f3422d9a2b7b2e37edb27c3a16cfae4e7cc71d9512f198a9cb5cb01b98063c49bbea3e4e9e22659dca44856c373dd7c5b3ceb105229d15e4dab0b964addb5f5496fac1a087729bb7e7169a5c8d1d9a0023da46fd8cc2128008c3499665397c25ec16e65c4db993539bb2eae1c07570ebb58a23d1290a33b98e151eef74ece9693c26365949e61c3ffb49421fbfc86eca4d171994940633df2cab019458b8a1c5fb7258e22e1ff3bc54d3313f96a69ecebc8515980c761db1671cab4093bde59b636f91eb296bc4262438e459382ce97f8a707b95ca3d6c9fcd401cc3d6f0b913bd24c4fbad76e2a49e6f76d7e7e1ef558eb9f92fb02cb86848d56dfc7fcae6cf36a381e2143db598759b7673ac0f722fc629935c576f9d15a488a64290e695ac5254b68a9bb3000cb6efa00fd38fbe8f46ff18ea2ea8867f292694dc58ed8259aaf988d7d4b4ed518ecd449f44f4848ffbbdb75ca727f697e2f852e718d4b1a02ae2beaebc328a0cb7a003cc161ee7d5c4b8921d94630a33af3c59a4de8d2ae828e0417f4b6d926b2ae7dd0d3e27c8b07667b97bd2eb9f385003eeff9cef69d3947b46c1c42f107142cbb1e54745488e0cf527195c961da8d5e547aea38f0fef6ebe3256f5a5039381f4aeb1b30c112f9c220f6d5b207dbd4e8ff9273a733145ccf45900509f39bfd11b279eea500cfd35afcf692350a251d1095fc72cbec28f33dfad087986f058860b58403a6aa3b102d65c46ad59ad9b4edb4992460273ad508d0e89c738b9cb24b363433521f779ea90a60e6114ee8935445c40fb20d43b7d3bc7994340a54ac567cbd20102f502cec57d2be36b6c227ae05e6bb94e9577d12858e2d7d55fe44a5e3369b7c7222d684877d19f54dc556868bb9bd35267a2bf0306313ff901d57734a990e2b653ddb6d9e5631d60526c1ce44b8ae89e7b5eab370740ee6da2864eeb5f7b1d37ef8daddb79d384d7af19348b62171fc46b34a4f25274d2f0eab95bbfc60724137ac57992905b60295e92a89fe3229d9c754d56d37b5953785f790791aeb9efa93e7e5de689ed06847e666ad3af7f578c15076f8e91fd89160df6240349f66eca8c7e154977b97f97385774324becfe2005062094c185b2727fd1d4333582be2f82fe1dcb23d9c634d8870b40773a34ef34b49dae8b538443b98df9ac1c4321ea7563f5766b77c6fca9ed1f33644b9de7d22ca54fa792689803e2bdf1540a7a2c7e5ca06585af5275eb046cf0a1c4504c7375811fd213849f61934509778f2b92e1ada1d8ed35dac5792afc0c11027d6510fed73fb0b9170ab2e03a6083907f6c2d761c6394ae68e505857fa1d37750ced81a6f6c8935060fe367b93758783506992fed370fe6d7dd2499f6b464a4954efba2a5ba11dbc9f394897986ac224a664cecb4104f4e44f2b0b07cf6914ba8597cd3f9a4a84e1c17f5c1311cb9f6c59f1a21fd96a8ee94a6bfe2db6cb1ec867dbafa3d47a06d5f822ab94c22e3fff80f50a22830011da63030ce60cd5a70f5ef754ef377cc737800f3aaa232df628b40ec6a636c18afa326958b9758744801e37aa942a27fe5feb6542ff878749eb54098d502019654eb153452bd06839a0deed9cee9afee4de80b410fb7d034d7e547c65d05272d3328732997d8a14972afffce5fe9687231757f0f3f92c7de12047367dec3546b9324832c2dc199cc3cde14e3ff9f74466b84c8c94fe4b30a8a3e72fc4062e73d288ae3644ccf75d32cca9ca95932f3694ee0d9b39ccd9f45465ae82cb27c8a1e2e3b1b60b16dc51094c0c6c4f824bc503dbbe779ff9cdb72ae8398e62aae72772c25cc30294d9433d9ba30d4bf144f0a7bde7e601aa2a274d6ff0043348ccda30096bd15d3593045819b6e5da775a489559506a937600e864a19336dd2357c64d2f7f7665e7e52b236eea0485cf8f46aa1c5b01dba8ee04ee2128e628ff2ba5cfe7c360ec961446473bfbb47b969c48749c66be60885f38842ca8fecf79a0c88b581c0934c502f0b68c619fb630c917ab277e1012243f4e46a5d2562c3d554e0382d1e6c2f72f6127cfad79f0d2e6be7d32c2865ea1e15a447695d718465242398e170cc354086775ad7b2e87e6034fbc2c8eb77a9554705febfac4a4a31202843145a03afa8dea2c2ab6ae603f12c443539edfc9b12f0558f01ee3ce15bb86ab922c16df9a06f53c27d5bb2569737a87e3b0833ea61a60c69e05460c1f62336e258031756cf07470924faa3e8ef9ea86cf42b468e5a05538fe7e85b11b7c4f2cd4746b6252ef25a2ea496076776ddca81eaedb8987a374977d509c245f2a0e2ff488592f92640ccd560cd88a0d69227bb81a7f05bec44435c830f5e70e96be12e79f63a47d6e0637e323fdddf6e668001b5756a357f2f9196a9b3835ed024401ed90c6c987bb73ce64ed8cea5665539deef814d65a7e795c8bd92aca10fc5bfd3e9607a23f1a1afb135422b5b3354710ca3227f8406745d5da29d0feda68d682335f1834f4a9ebab4fe8d0b33b3a4519dc22399967787f1a7351349aa585cc069b9661bbe34de2d34a4e4eedc55a124ef81ec1051acabf992357a9c143ed5603261a055036034d2d60589ad92b45f7117bb0c9fe5f6144da2f250ad20730dcce48755dcb3546b9a1455ac", 0x1000) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 620.071139][T31047] ? down_read+0x120/0x120 [ 620.075562][T31047] ? init_wait_entry+0x1c0/0x1c0 [ 620.080514][T31047] alloc_super+0x8f2/0xa10 [ 620.084942][T31047] ? destroy_unused_super.part.0+0x110/0x110 [ 620.090939][T31047] sget_userns+0x164/0x6c0 [ 620.095357][T31047] ? get_anon_bdev+0xc0/0xc0 [ 620.099954][T31047] ? vfs_get_super+0x260/0x260 [ 620.104723][T31047] ? security_capable+0x9b/0xd0 [ 620.109587][T31047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 620.115837][T31047] ? ns_capable_common+0x93/0x100 [ 620.120873][T31047] ? get_anon_bdev+0xc0/0xc0 [ 620.125464][T31047] sget+0x10c/0x150 [ 620.129278][T31047] ? ovl_show_options+0x550/0x550 [ 620.134305][T31047] mount_nodev+0x31/0x110 [ 620.138647][T31047] ovl_mount+0x2d/0x40 [ 620.142724][T31047] ? ovl_own_xattr_set+0x10/0x10 [ 620.147665][T31047] legacy_get_tree+0xf2/0x200 [ 620.152360][T31047] vfs_get_tree+0x123/0x450 [ 620.156874][T31047] do_mount+0x1622/0x2fa0 [ 620.161218][T31047] ? copy_mount_string+0x40/0x40 [ 620.166166][T31047] ? kmem_cache_alloc_trace+0x354/0x760 [ 620.171723][T31047] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 620.177968][T31047] ? _copy_from_user+0xdd/0x150 [ 620.182816][T31047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 620.189036][T31047] ? copy_mount_options+0x30e/0x440 [ 620.194220][T31047] ksys_mount+0xdb/0x150 [ 620.198449][T31047] __x64_sys_mount+0xbe/0x150 [ 620.203110][T31047] do_syscall_64+0x1a3/0x800 [ 620.207702][T31047] ? syscall_return_slowpath+0x5f0/0x5f0 [ 620.213342][T31047] ? prepare_exit_to_usermode+0x232/0x3b0 [ 620.219044][T31047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 620.224582][T31047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.230472][T31047] RIP: 0033:0x458099 [ 620.234347][T31047] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 620.253949][T31047] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 620.262361][T31047] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:46 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r3, 0x0, 0x1, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x12e50e371da0137f) 10:19:46 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400400, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xffffffff80000001) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2000fb, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x20, 0x0, 0x1b, 0x1, 0x5, "14c7442f0918da6151e18894dc7ebc2f530b8d8a03eb7ed52078153f30ec911e5039d3d8259691166853007939055f4d2150d72406d0451df8fc493997281ed8", "653292824fd4dfb3dda28671bfbc47c499d6f90dd8549e4cb74205d284f0eea4a9fb9b02928d3c3738c1256f22bae5c255631e3879e157ed826d45f8820577ac", "58076abefacbe074c495ff6f3ce2a53bc67a8cf0b316e687e8bf25d54fdec1ad", [0x4, 0x1ff]}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r2, 0x541b, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000200)) 10:19:46 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x68, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 620.270314][T31047] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 620.278270][T31047] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 620.286229][T31047] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 620.294194][T31047] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 620.369235][T31056] overlayfs: './file0' not a directory [ 620.393954][T31078] overlayfs: unrecognized mount option "lowerd-û;ê" or missing value [ 620.397801][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 620.397815][ T26] audit: type=1804 audit(1547720386.271:389): pid=31056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1019/file0" dev="sda1" ino=16612 res=1 [ 620.411638][T31079] overlayfs: unrecognized mount option "lowerd-û;ê" or missing value [ 620.442698][ T26] audit: type=1804 audit(1547720386.321:390): pid=31059 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1019/file0" dev="sda1" ino=16612 res=1 10:19:46 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xf00, 0xd1) 10:19:46 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x40000) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=0xcc) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) migrate_pages(r2, 0x78, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x7f) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x105040, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) 10:19:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:46 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x6c, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:46 executing program 5 (fault-call:1 fault-nth:34): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 620.494261][ T26] audit: type=1804 audit(1547720386.331:391): pid=31078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1156/file0/file0" dev="sda1" ino=16528 res=1 10:19:46 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x21) write$binfmt_aout(r1, 0x0, 0x0) 10:19:46 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x84100, 0x0) accept4$rose(r0, &(0x7f0000000200)=@full={0xb, @dev, @remote, 0x0, [@rose, @null, @netrom, @netrom, @default, @bcast]}, &(0x7f0000000240)=0x40, 0x800) mq_open(&(0x7f0000000080)='/dev/admmidi#\x00', 0x80, 0x4, &(0x7f00000000c0)={0x0, 0x90d, 0x7e, 0x1ff, 0x4, 0x0, 0x0, 0x7}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x3f, @empty, 0x4e20, 0x2, 'none\x00', 0x8, 0xdae, 0x1e}, 0x2c) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 620.532857][ T26] audit: type=1804 audit(1547720386.331:392): pid=31078 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1156/file0/file0" dev="sda1" ino=16528 res=1 [ 620.576257][T31092] FAULT_INJECTION: forcing a failure. [ 620.576257][T31092] name failslab, interval 1, probability 0, space 0, times 0 [ 620.624927][T31092] CPU: 0 PID: 31092 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 620.633990][T31092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.635051][T31096] overlayfs: './file0' not a directory [ 620.644042][T31092] Call Trace: [ 620.644069][T31092] dump_stack+0x1db/0x2d0 [ 620.644092][T31092] ? dump_stack_print_info.cold+0x20/0x20 [ 620.662831][T31092] ? __kmalloc+0x15c/0x740 [ 620.667250][T31092] ? __list_lru_init+0x13f/0x850 [ 620.672191][T31092] ? alloc_super+0x8f2/0xa10 [ 620.676791][T31092] ? sget_userns+0x164/0x6c0 [ 620.681385][T31092] ? sget+0x10c/0x150 [ 620.685370][T31092] ? ovl_mount+0x2d/0x40 [ 620.689624][T31092] should_fail.cold+0xa/0x14 [ 620.694224][T31092] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 620.700045][T31092] ? ___might_sleep+0x1e7/0x310 [ 620.704902][T31092] ? arch_local_save_flags+0x50/0x50 [ 620.710195][T31092] ? check_preemption_disabled+0x48/0x290 [ 620.715929][T31092] __should_failslab+0x121/0x190 [ 620.720880][T31092] should_failslab+0x9/0x14 10:19:46 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x20080) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) 10:19:46 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x74, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:46 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x6002, 0x0) unlinkat(r0, &(0x7f0000000080)='./file1\x00', 0x200) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x1000, "61c89e7fb78d699a95e085bd5a284bdfae1ca524eecb6e7509b69b6f80836736163299249a362b0e790d6fbaa981da69ec851096c3d314357d0c4c432bea741627252989794f2250058f6c4239f732d17ff1d5f4fda10beab1f16b3996c38740ef91f4a1796abdfa33af59df7f3c5dbc58725b37be777fdaf21ef334a31cf01a4e42d548191fcfec7f081e4ca9f7ab8b87b9037b575d98abefad4bd4ec328b40eaf97e0acf6ec59d362a613f83fef24bdae26bdc9f3cacaf3a371d58c2922c2902225938dd852eeb0fad088bf6ff51c1cd2364f22e9224987104efdffb831b9e72ffefd30434e2245ce4528df0848c19e897987b27b5d3896ec5ded1d59f409f737baf2eb5f19647e553d71e5df1dbc3fffb5a43660b08a7c1aae7c8d7d4cb96237e044038663871780fb30ae441d09862de1d32cd43bb394a8d730e91913ee3362c9d2c0f568cb3c55082fa4848fb4c8e5147666b6b334cb11a676ec3419cd8fedbe176b06e174ade8444a4c5269f9ad2a8301a9c5ff91627a3514e26fd4a82c6ec77c548250bab96a41e88584103595ae4827f8ab7ca16c3a7fe15392d9cd879488e482f05a17c81f0057f79bff8606299c767af845f2a5789bb166ecf12509ac9dffff50558feb5695482cf266943a953878b9da036eae9ce5dcbdee00de0c5dac01c77951b2bc5662bc19d78def535f13ec3023690eeaa822bc3747b576a6ff7c6cd3ac503376f10dba00878f97a3ba4098a1035c9f1f26147da80dcfeb5aa3a936525d02727d3236be80b946f6ae73fce731277bf7141d92aed23b8b27878e3deb10fa324c1e190613e8a275f0b4173b3cbcadd49a7b0b63a30ed70825c152cd1fff4d506c92c36d7c2960f214bf5a4ffd0421fe3210079f3c4272d5cb5cc6cccca51c76e7224975efacf01663707d7823a995d5b88b8e2e74972cc572b7e836efccfac08cfa52fe9380c6cff1cca4e3d8bea3af0526eec2a9b430100e8f1563b41d26c7e93dab0693b53cb8b6bc2f6009e7774df4a1da89df79ec040b7857f9ba0ab6c8cb5f3071b07c38a6b949ac955177a10410ad9113a17f428b9c9eeb4fc0d31c7d4c7190cc1aec166c6314ddad36509e6743d6e8d689d3334a1fc9d95dde7103f21d89ffaec3ddad29dccd80f2cc1f84a68982bc203676c2733e269d613d2a8f59b1b5593661b72b0d19a0f115f0666e32d9386c06136ddcbc6d387f1a268bc60242efa87d49822c93381586f70370afc7cc77314ffae9662a645c9f9e538377a905c30b383d805f8c5bf94ea9e990e0c01b90097a5ef8c0ee59d64a5049191261121d93bdd2f926e19e67dc5eada6703f9b9ea0d9dad7aa944fdf7acc5eefa0185ced7b290efc1e39bd2902270d7a1cc83a6362bfe8f389e4e52573abc49c4832075ee3b31f538a2199a9c08ff255875834f5cf11d55355f63e5dd2811851d1b8cc2fbde90b4d7ed881b63b61bac9291f22b51d4232f7ed4b661fa2cdac96b61e429a6c21037c39d774b4f24217b8746290aa6fdc6cb1de8b363a6992ba45713752eff5684a1df4b1c69d4a89a150939e3469e8057db96ca1b4092d6de99cb691a9ca3616169afd7460278917cb29e8652178f41625575207edebcebd59507322350ebdefd0b4305cc8d84976df7aff7ebd1355ba0a790b8703ea2729bae3d33cde24961d63017eb1927111771cf6edacdc1d7146bcb9f14ca2f124ec4deaf6dcc25f0c1cf33bd9bf43aa1f67d070dde228548ca76b81c1e98683f5dedc29f103fa83d9525ce919fd5562ada7555a61f0cd858d684a4c290ce971e0b04cfd26045297e462a29c1347c2e331ab4fbc00e6efbaf2579d4b5d7d57a719ef7ee191024ccdcba0f76fb0a3f7957facb523d4aac02d244baaff80455fdcaeac5cce714fc1d12c2048a56897c4d2cfcb1a5b4981e4e3f396e78ca99140b1dd0b5ccddde00fd535f2f19415dfb681b663ce88040a789290bff949d50d3e49755788cf1bf5ef2127b7f3d2713ed56ede8adcde070cb4f12ef456a3277e83664976915ec4b1340659c76135862537f4f027901916bc654a3ab97b4fcddbfa118b3802e309309c749abad8e94d396229e8286cedb2c34403aef70669663e0bd33862fb4819d3a5338cba37cb0e2dd2d52ddf7fbcfa0ca3f40e384b2dc763d3afb2f6c077bb840e61436061712dc764b5d09e56bd3cb1a2f361cf4a4d3053173daf808aefd45dc45ad3f153ab750aa669de27699ba9db75bf7da4948144a5d96b314438fd65ec09b3d043af251119ef105ca101d416a63580e2f173aeab96e5a753d82cec1415b192cd0ed456653b478c1397c475ecf0a51d2768fadedf7bef695f62fa84a65694e4c3943c331159b2208b9d100d31bc905efd9479c25da7694f0198d04e0559ecaa5969025b54fe0bcdeffad724ed092b1c1bc770cdd73a2e5562e9b456bac076ab60414468b42e0373295661eb482ab9809ac0022ae12b1520e73188e01ff7c201f37fab36c62f16555a07edeab6d6f6faed9733335202080a0ed8c342e9d8313a016149c9ef59d4e516dfedbe2497a17fa7f01a52bdc0b889a21e795d9a0f10bf1064fb13fc73fd36a5700168d20ca250f24f8325950b9e9c38aa416a9f945f5f01da8dbe8eaa087712869eaaee2371971c2a8fc821fa9bdfd0999e27e8793e29f3858d86e66e8a275293842dc2f3c0a3fa6a4a31d3cce2617b8279658829be60ce2ec8bb72c7115f160486df3f6673c9306e93cc78712660dce85b814cf38dbc7f4639d26a227a291a1bf419cfea4dd03140f5abfca5afe8d94cb8a504fcee510f0d5b86ad9dbbe4b93161c8513363176b599b2975f27788daa2258dd1275be1488e927359c699e3abb40f8fecc4e8f0f65a22d2a549956fdbeb56a2abeadd40b25eccb9588a06f8219ef1da0f5f127bf38ca107a5d96b602d29b2e6feb11c3c3a80e9578c1ffaa0b20f0c3c20ee02cfa616de615208573599a0c81b3c77302f0b3a1a814367d0bc7bb8573b6733885d875cf845125249cb7dd30e5a2efc84b5078d9bad9f96b06c6e3756cae99b7cafe93dd2bdea0dac29b7dd83688b974ea4a55e05cf4c7a26b088d52e23310de93c0562a01d514c3242a35ef1ecbb391a540cdf93a4d667818301debc7237728470bdf2e4d5795fd9de013708083f818d0adf15a76ae73421b3709dc295a5aa1a05ba09dc2b028cf70b47a3b6081ef62826bba78cbc8328230315eabf573a71864975c250f02ac3059b8c8c0214e9c96f4269f8b577c0b117755aa31043bbc6f6e908332ca3f386df79e1e5f5bcaa760a72bd37e56535a94c94c69f050b11a841a6fc3cabca72a130e1e24aef1c33f2e0064f514d9480785da13d878b7ef233722dc64e6d6c835b61df953efb4103a87d89cec126d7aef747609b5b9122f1c06c3cb511d0597e4820527ae784e0da0a4a8d14e441cf31e73441a9b94655652de840e428739adadb065f5ada3fbdc7805cfb1693112eb759c354d93209e0102cd0367e9c97c5af7237621ca006a4eb75ac78063b79cb33f3772c719564db0bf025876529477b27c9a59d45f9f34acf641ad82472b55ef213ec1d1fde72e56e92cf58954f64052da988ffeb616bfc5ac83df58fbf94cb22a4fc2fb770a5c1ff37a990936fa4a22d6099e0c2135825309a1805f663b9ca31bf6b98ab43ae56e00d9d65dc58616b67ad221746ec1ce6226d898a359eb005911c84ec95f1dadbe12ce3d6506233f2ee25d8299c942a3769cf84347c8307c5e69a53837e97190aa0261461166fd8cca11a67648a5e428fd40e0ca6bd9e696c6978f8d2518713b5dedcc9e0a3e345a3c7892cdde261d482dca55cf37afeb9c702ab878207b215a6e14fedd4580ee83380f1254127d79c28dca4e1d7b41a4a375c5fdea599737af030681595a5d8f963d8d02d3f09f4fde0724a94cad57ae883e54e7a3e72641d3448b890203ac49006ab24668f6c01bb3e2e88e6cc2828f44a6cbf2c9adea7d3a37edf38ebe874850e1afc72fd56bf78d5538c3278b63aca8be65f140a8e84b8fddf4a9fc20fd28ecc4738bab33c614bcd4d1834491d6904e4838aa047f1f6435767b8b70f4c969eeac8a6b801789806c495406f5ddf05e9f4a3f59b32dcbcd7e5fe50b88c679936fb4cc60435697443b370aaa8d1a8fbd50e65edbf2df39f59642815b508e36968ec1daa6adb2d40a357a8bed31941f177d61c153a6a557de0c6b64ec31341e86b3d22648b2cb102f3294f6ed9aca57ee6972ac861c09cb90a8df938d196f99463c87f7cb2598d2e6444fa7ae52a79f7a83b5b0d21c6e8405a630e6a9b88f35915b35eebadc508b211e4c4a5a3a6b34bf347607e794fc165e1cb6b0ecf5568cfee93bca411493ad54ccf191b474f27624fc8f19228e492bb8a74d57903a7a1fda5e2458bfc6a0481cf8851ea12c444b52170e02345da81bf56ba500c60c998716e329e1c8a8ba96de29e2f95be46bee151c18fc4c66f821e6a05fc3ee0f2bd73b807653dd65d5624e208700666bee0215378bab85ebf7917cb33c11e10752a0a673cab9804f60a10858bd1b1afeaa7937efa089296f0ccf81c84749c85337b75e455fbf44ed6fe8fa54a963a733fa659ae51d775f809b3ca0da35f53cfe01c7e3b97b1922cec1eef38de8c05df9f256300cd31785f03d0a0d43311c46b990dcf9b6fc477eb1438bcc337086b5e0687ad10286ee67db5872e590324a289fbb5ab7f744895bfa1275d9ece604ce6836fa2f74af38b59babca5c58d273ea0fd1810d618a91ec122e9809c0ccf7a43d9228a818b20bfba7ece21b61830f20a4d88d4cbdca556a2b1ec3cfd854346d898e28cbbdae1caa759338d01517d5881a6bb33ef7ccdf2b22d1efae3bd823eb7973d77ff9e66894854e21f22b1531fd866817eed9aa1756b9b10c4d5084bf5572dde3efeeac75bdff6ec4d77ed3488b0fc81468e4790b0a40f98c3bcb1c4d3ea5439657a985b97371b83d675a3ab4ec6dad8dd44fb17dbab617e078d8e5df83568ebf18ca17560b0208b785360e4410ec3088e4f1e77ac437c5483f88ce1f4ddbd8a8595b784fed2409229737975cb7eaffee2ea328cfa132ec88a4798620e4f2f6a9c32aa3caa565c6a21db980741d3d027c36b76b7a5e4d6d910eacff81c592ae4b05c2125cae5b96343f3aa675af33722484de076de84c320e0067abde4a8cd998c2c2c4b2e966427ce08588412ac3158d120787f0303d23e704c2a7cc4a7a9090b0ce11ee6e744d8a97fb93685e65994d35a451a52e35cd6a19784ab65d42d2bb2ffddcdf74ffd4a778f3514bcceffaf4c619d0741e78964deeb9782e2df6fddd3080e0c6710261e02c9b8f0b5d697d7e16cdfd621f48d4065eee5ba020db6fc2c460fa3768b2489393b4e9c6e7d5f73433e38498a56ca4100f42512942ba656778857b10ead007471086d19772859237eeb91bbd3d5d0c0476409b3f90b24f99d34b1b884f3c6f8d62da6fc31fe6bada623e44c6996754ba2f0679de6e109333890acef16b9c587bd540c9453a566ea8020109900ef2e66267afc05b5617ae44260acc6e4841be179f33b1d37e05e79190064c20acfbdc1b69c78956aa61bd4501c2403c8bdc087f3fd63592db1bfc9ef13a60fe009d0d574a63f337a5f08e4165e8b04d4c1b17e9cc9d886b5b36cf1f78f952470b92c3a37fcd28bed55a18c6b175357aeab1b06663058f004899aa3cd5fd600ce843f2101c04be7a85d040fd78fd3592e86d69c6327320582788f25e9c6f7751f01a"}, &(0x7f0000000140)=0x1024) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xb0, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x4e3, @local, 0x20}, @in6={0xa, 0x4e20, 0x9, @local}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e23, 0x800, @dev={0xfe, 0x80, [], 0x14}, 0x8000}, @in6={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x1d}}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1, 0x3, "a45f17"}, &(0x7f0000000340)=0xb) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r2, 0xc5b2, 0x5096000000000000}, 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x1, 0x4) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x4000, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x2b, @multicast1, 0x4e24, 0x1, 'lblc\x00', 0x16, 0x100, 0x8}, 0x2c) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x80000000, 0x4) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x4) fchdir(r4) r5 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r6 = getpgrp(0x0) capget(&(0x7f00000005c0)={0xb3add3f94811e6e5, r6}, &(0x7f0000001680)={0x24d4, 0x3f, 0x4, 0x9, 0xa8, 0xffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000300), &(0x7f00000016c0)=0xa0) write$binfmt_aout(r5, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x5c53) 10:19:46 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x7a, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:46 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x300, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 620.725388][T31092] kmem_cache_alloc_node_trace+0x270/0x720 [ 620.731207][T31092] __kmalloc_node+0x3d/0x70 [ 620.735724][T31092] kvmalloc_node+0x68/0x100 [ 620.740238][T31092] __list_lru_init+0x5d5/0x850 [ 620.745010][T31092] ? list_lru_destroy+0x520/0x520 [ 620.750038][T31092] ? down_read+0x120/0x120 [ 620.754455][T31092] ? init_wait_entry+0x1c0/0x1c0 [ 620.759407][T31092] alloc_super+0x8f2/0xa10 [ 620.764006][T31092] ? destroy_unused_super.part.0+0x110/0x110 [ 620.770009][T31092] sget_userns+0x164/0x6c0 [ 620.774432][T31092] ? get_anon_bdev+0xc0/0xc0 [ 620.779030][T31092] ? vfs_get_super+0x260/0x260 [ 620.783798][T31092] ? security_capable+0x9b/0xd0 [ 620.788657][T31092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 620.794902][T31092] ? ns_capable_common+0x93/0x100 [ 620.799942][T31092] ? get_anon_bdev+0xc0/0xc0 [ 620.801364][T31110] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 620.804532][T31092] sget+0x10c/0x150 [ 620.804560][T31092] ? ovl_show_options+0x550/0x550 [ 620.804580][T31092] mount_nodev+0x31/0x110 [ 620.804597][T31092] ovl_mount+0x2d/0x40 [ 620.804611][T31092] ? ovl_own_xattr_set+0x10/0x10 [ 620.804627][T31092] legacy_get_tree+0xf2/0x200 [ 620.804644][T31092] vfs_get_tree+0x123/0x450 [ 620.804663][T31092] do_mount+0x1622/0x2fa0 [ 620.804686][T31092] ? copy_mount_string+0x40/0x40 10:19:46 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1200, 0xd1) 10:19:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="f4ef7f40003f000101"], &(0x7f0000000080)=0x12) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], 0x6, 0x6, 0x3, 0x3}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000340)=0x41f) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) [ 620.826920][ T26] audit: type=1804 audit(1547720386.551:393): pid=31090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1157/file0/file0" dev="overlay" ino=103388 res=1 [ 620.830584][T31092] ? kmem_cache_alloc_trace+0x354/0x760 [ 620.842131][ T26] audit: type=1804 audit(1547720386.551:394): pid=31090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1157/file0/file0" dev="overlay" ino=103388 res=1 [ 620.844636][T31092] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 620.844654][T31092] ? _copy_from_user+0xdd/0x150 10:19:46 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x500, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 620.844673][T31092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 620.844691][T31092] ? copy_mount_options+0x30e/0x440 [ 620.844712][T31092] ksys_mount+0xdb/0x150 [ 620.844730][T31092] __x64_sys_mount+0xbe/0x150 [ 620.844747][T31092] do_syscall_64+0x1a3/0x800 [ 620.844760][T31092] ? syscall_return_slowpath+0x5f0/0x5f0 [ 620.844772][T31092] ? prepare_exit_to_usermode+0x232/0x3b0 [ 620.844787][T31092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 620.844806][T31092] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 620.844816][T31092] RIP: 0033:0x458099 [ 620.844826][T31092] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 620.844832][T31092] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 620.844843][T31092] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 620.844849][T31092] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 620.844855][T31092] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:46 executing program 5 (fault-call:1 fault-nth:35): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:46 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x16400, 0x1c) ioctl$TCXONC(r1, 0x540a, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 620.844862][T31092] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 620.844868][T31092] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 620.961786][T31119] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 620.986451][ T26] audit: type=1804 audit(1547720386.701:395): pid=31097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1020/file0/file0" dev="overlay" ino=103407 res=1 10:19:47 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000001c0)="675dfd63c25d8194d9efe6f534156abfebbfdd228b8ab9f1b45f7adc51246b6b71695b45802ccd8fe10239b4f5ebe5b556cc9f1029917d9e1e8a1ff97a393602e0eb0bacb20e0bfe3bd7aba2e31cc4b5ce181263cf90c3842eaf565354b23f9c710882413b3f713418db391cf019d3b223e78d82b377fea09db0457c6f2b2e9f39f692dcfbaf899e46f2f50485aee49c2057d3a1662273528ddb8888a9d6bbb26245f01953d730b284d75bfc44932b0bf6c36a2acfa397a4b5359119b928be717c98adb5b5b49b07d38effcf27faa2b0dca5c45d4afccda247bfcaacbcdc304882207155cfe15567add9ce81cfb4b90be3e3e1c44ff33a538257ce14873e2c1f") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000080)={0x4, 0xfffffffffffffffd}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x2e2, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 621.102769][T31128] FAULT_INJECTION: forcing a failure. [ 621.102769][T31128] name failslab, interval 1, probability 0, space 0, times 0 10:19:47 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x600, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="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", 0x1000, 0xfffffffffffffffc) keyctl$link(0x8, r1, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 621.140790][ T26] audit: type=1804 audit(1547720386.701:396): pid=31097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1020/file0/file0" dev="overlay" ino=103407 res=1 [ 621.169083][T31127] overlayfs: './file0' not a directory [ 621.180681][T31128] CPU: 1 PID: 31128 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 621.189736][T31128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.199793][T31128] Call Trace: [ 621.203097][T31128] dump_stack+0x1db/0x2d0 [ 621.207439][T31128] ? dump_stack_print_info.cold+0x20/0x20 [ 621.213187][T31128] should_fail.cold+0xa/0x14 [ 621.217795][T31128] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 621.223234][T31139] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 621.223612][T31128] ? ___might_sleep+0x1e7/0x310 [ 621.236670][T31128] ? arch_local_save_flags+0x50/0x50 [ 621.241950][T31128] ? check_preemption_disabled+0x48/0x290 [ 621.241977][T31128] __should_failslab+0x121/0x190 [ 621.241996][T31128] should_failslab+0x9/0x14 [ 621.242014][T31128] kmem_cache_alloc_trace+0x2d1/0x760 [ 621.262581][T31128] ? rcu_read_lock_sched_held+0x110/0x130 [ 621.268306][T31128] __memcg_init_list_lru_node+0xef/0x2e0 [ 621.268326][T31128] ? kvfree_rcu+0x20/0x20 [ 621.268343][T31128] ? kasan_kmalloc+0x9/0x10 [ 621.268359][T31128] ? __kmalloc_node+0x4e/0x70 [ 621.268379][T31128] __list_lru_init+0x4d9/0x850 [ 621.268397][T31128] ? list_lru_destroy+0x520/0x520 [ 621.287469][T31128] ? down_read+0x120/0x120 [ 621.287490][T31128] ? init_wait_entry+0x1c0/0x1c0 [ 621.287527][T31128] alloc_super+0x8f2/0xa10 [ 621.311016][T31128] ? destroy_unused_super.part.0+0x110/0x110 [ 621.314869][ T26] audit: type=1804 audit(1547720387.051:397): pid=31131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1158/file0/file0" dev="overlay" ino=104471 res=1 [ 621.317020][T31128] sget_userns+0x164/0x6c0 [ 621.317042][T31128] ? get_anon_bdev+0xc0/0xc0 [ 621.317060][T31128] ? vfs_get_super+0x260/0x260 [ 621.343098][ T26] audit: type=1804 audit(1547720387.061:398): pid=31132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1158/file0/file0" dev="overlay" ino=104471 res=1 [ 621.346968][T31128] ? security_capable+0x9b/0xd0 [ 621.346990][T31128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 621.347004][T31128] ? ns_capable_common+0x93/0x100 [ 621.347029][T31128] ? get_anon_bdev+0xc0/0xc0 [ 621.347047][T31128] sget+0x10c/0x150 [ 621.405729][T31128] ? ovl_show_options+0x550/0x550 [ 621.410738][T31128] mount_nodev+0x31/0x110 [ 621.415049][T31128] ovl_mount+0x2d/0x40 [ 621.419094][T31128] ? ovl_own_xattr_set+0x10/0x10 [ 621.424010][T31128] legacy_get_tree+0xf2/0x200 [ 621.428685][T31128] vfs_get_tree+0x123/0x450 [ 621.433176][T31128] do_mount+0x1622/0x2fa0 [ 621.437487][T31128] ? copy_mount_string+0x40/0x40 [ 621.443030][T31128] ? kmem_cache_alloc_trace+0x354/0x760 [ 621.448585][T31128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 621.454807][T31128] ? _copy_from_user+0xdd/0x150 [ 621.459659][T31128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 621.465879][T31128] ? copy_mount_options+0x30e/0x440 [ 621.471061][T31128] ksys_mount+0xdb/0x150 [ 621.475289][T31128] __x64_sys_mount+0xbe/0x150 [ 621.480041][T31128] do_syscall_64+0x1a3/0x800 [ 621.484620][T31128] ? syscall_return_slowpath+0x5f0/0x5f0 [ 621.490251][T31128] ? prepare_exit_to_usermode+0x232/0x3b0 [ 621.495958][T31128] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 621.501503][T31128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 621.507472][T31128] RIP: 0033:0x458099 [ 621.511368][T31128] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 621.530968][T31128] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 621.539364][T31128] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x7, 0xffffffff, 0x0, 0x80000000000000, 0x6}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0x0, 0x40}, &(0x7f00000000c0)=0x8) 10:19:47 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x700, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:47 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3, &(0x7f00000003c0)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 621.547318][T31128] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 621.555271][T31128] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 621.563231][T31128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 621.571184][T31128] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 621.612436][T31149] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 621.623603][T31130] overlayfs: './file0' not a directory 10:19:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)) 10:19:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x80000001, 0x1b97, 0x3, 0x7fff, 0x2}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x8, 0x9, 0x1, 0x200, 0xfffffffffffff801, 0x3, 0x7, 0x6, r2}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:47 executing program 5 (fault-call:1 fault-nth:36): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:47 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1500, 0xd1) 10:19:47 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x900, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 621.690980][T31152] overlayfs: missing 'lowerdir' [ 621.699036][T31153] overlayfs: missing 'lowerdir' 10:19:47 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f1fbecff79f83337bd87ca5e87765726469723d2e2f66696c65248372c6a4302c776f726b6469723d2e2f6669"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) fstat(r0, &(0x7f0000000080)) write$binfmt_aout(r1, 0x0, 0x0) 10:19:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f0000002b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_elf64(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x541b, 0x711ffe) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x10001, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000200)=""/96) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000140)={r5, &(0x7f0000000340)=""/96}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) [ 621.759832][T31159] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 621.793090][T31164] FAULT_INJECTION: forcing a failure. [ 621.793090][T31164] name failslab, interval 1, probability 0, space 0, times 0 [ 621.829844][T31166] overlayfs: unrecognized mount option "lo¾Ï÷Ÿƒ3{Ø|¥èwerdir=./file$ƒrƤ0" or missing value [ 621.835529][T31164] CPU: 1 PID: 31164 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 621.848978][T31164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.859047][T31164] Call Trace: [ 621.862353][T31164] dump_stack+0x1db/0x2d0 [ 621.866705][T31164] ? dump_stack_print_info.cold+0x20/0x20 [ 621.868048][T31172] overlayfs: unrecognized mount option "lo¾Ï÷Ÿƒ3{Ø|¥èwerdir=./file$ƒrƤ0" or missing value [ 621.872433][T31164] ? __kmalloc+0x15c/0x740 [ 621.886900][T31164] ? __list_lru_init+0x13f/0x850 [ 621.891841][T31164] ? alloc_super+0x8f2/0xa10 [ 621.896441][T31164] ? sget_userns+0x164/0x6c0 [ 621.901045][T31164] ? sget+0x10c/0x150 [ 621.905027][T31164] ? ovl_mount+0x2d/0x40 [ 621.909288][T31164] should_fail.cold+0xa/0x14 [ 621.913893][T31164] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 621.919702][T31164] ? ___might_sleep+0x1e7/0x310 [ 621.924572][T31164] ? arch_local_save_flags+0x50/0x50 10:19:47 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) 10:19:47 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x536d3bef38bfcd4d) 10:19:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x0, 0x2a, 0x8, 0x80, 0x3ff}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 621.929882][T31164] ? check_preemption_disabled+0x48/0x290 [ 621.935723][T31164] __should_failslab+0x121/0x190 [ 621.940669][T31164] should_failslab+0x9/0x14 [ 621.945181][T31164] kmem_cache_alloc_node_trace+0x270/0x720 [ 621.951007][T31164] __kmalloc_node+0x3d/0x70 [ 621.955526][T31164] kvmalloc_node+0x68/0x100 [ 621.960038][T31164] __list_lru_init+0x5d5/0x850 [ 621.964811][T31164] ? list_lru_destroy+0x520/0x520 [ 621.969839][T31164] ? down_read+0x120/0x120 [ 621.974264][T31164] ? init_wait_entry+0x1c0/0x1c0 10:19:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) [ 621.979220][T31164] alloc_super+0x8f2/0xa10 [ 621.983650][T31164] ? destroy_unused_super.part.0+0x110/0x110 [ 621.989660][T31164] sget_userns+0x164/0x6c0 [ 621.994084][T31164] ? get_anon_bdev+0xc0/0xc0 [ 621.999145][T31164] ? vfs_get_super+0x260/0x260 [ 622.003909][T31164] ? security_capable+0x9b/0xd0 [ 622.008773][T31164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.015016][T31164] ? ns_capable_common+0x93/0x100 [ 622.020061][T31164] ? get_anon_bdev+0xc0/0xc0 [ 622.024657][T31164] sget+0x10c/0x150 10:19:47 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) 10:19:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x80, 0x10, 0x8, 0x400}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0xca}, &(0x7f00000000c0)=0x8) [ 622.028482][T31164] ? ovl_show_options+0x550/0x550 [ 622.033513][T31164] mount_nodev+0x31/0x110 [ 622.037846][T31164] ovl_mount+0x2d/0x40 [ 622.041920][T31164] ? ovl_own_xattr_set+0x10/0x10 [ 622.046865][T31164] legacy_get_tree+0xf2/0x200 [ 622.051558][T31164] vfs_get_tree+0x123/0x450 [ 622.056069][T31164] do_mount+0x1622/0x2fa0 [ 622.060420][T31164] ? copy_mount_string+0x40/0x40 [ 622.065548][T31164] ? kmem_cache_alloc_trace+0x354/0x760 [ 622.071109][T31164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 10:19:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$RTC_WIE_OFF(r1, 0x7010) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 622.077359][T31164] ? copy_mount_options+0x30e/0x440 [ 622.082566][T31164] ksys_mount+0xdb/0x150 [ 622.086816][T31164] __x64_sys_mount+0xbe/0x150 [ 622.091502][T31164] do_syscall_64+0x1a3/0x800 [ 622.096103][T31164] ? syscall_return_slowpath+0x5f0/0x5f0 [ 622.101747][T31164] ? prepare_exit_to_usermode+0x232/0x3b0 [ 622.107483][T31164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 622.113043][T31164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.118935][T31164] RIP: 0033:0x458099 [ 622.122842][T31164] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 622.142458][T31164] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 622.150878][T31164] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 622.158854][T31164] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 622.166849][T31164] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:48 executing program 5 (fault-call:1 fault-nth:37): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 622.174801][T31164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 622.182752][T31164] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 622.250324][T31168] overlayfs: './file0' not a directory [ 622.257909][T31199] FAULT_INJECTION: forcing a failure. [ 622.257909][T31199] name failslab, interval 1, probability 0, space 0, times 0 [ 622.270779][T31199] CPU: 0 PID: 31199 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 622.279798][T31199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.289848][T31199] Call Trace: [ 622.293150][T31199] dump_stack+0x1db/0x2d0 10:19:48 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1800, 0xd1) 10:19:48 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000080)={0x8000, 0x7, 0xfffffffffffffc00, 0x1, 0x2}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x303, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:48 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xa00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:48 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x4) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 622.297495][T31199] ? dump_stack_print_info.cold+0x20/0x20 [ 622.303217][T31199] ? __x64_sys_mount+0xbe/0x150 [ 622.308070][T31199] ? do_syscall_64+0x1a3/0x800 [ 622.312837][T31199] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.318908][T31199] ? print_usage_bug+0xd0/0xd0 [ 622.319322][T31202] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.323676][T31199] should_fail.cold+0xa/0x14 [ 622.323699][T31199] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 622.323720][T31199] ? ___might_sleep+0x1e7/0x310 [ 622.323739][T31199] ? arch_local_save_flags+0x50/0x50 [ 622.352463][T31199] __should_failslab+0x121/0x190 [ 622.357408][T31199] should_failslab+0x9/0x14 [ 622.361933][T31199] kmem_cache_alloc_trace+0x2d1/0x760 [ 622.367323][T31199] __memcg_init_list_lru_node+0xef/0x2e0 [ 622.372963][T31199] ? kvfree_rcu+0x20/0x20 [ 622.377300][T31199] ? __kmalloc_node+0x4e/0x70 [ 622.381988][T31199] __list_lru_init+0x4d9/0x850 [ 622.386762][T31199] ? list_lru_destroy+0x520/0x520 [ 622.391794][T31199] ? down_read+0x120/0x120 [ 622.396220][T31199] ? init_wait_entry+0x1c0/0x1c0 10:19:48 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xb00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 622.401171][T31199] alloc_super+0x8f2/0xa10 [ 622.405600][T31199] ? destroy_unused_super.part.0+0x110/0x110 [ 622.411721][T31199] sget_userns+0x164/0x6c0 [ 622.416137][T31199] ? get_anon_bdev+0xc0/0xc0 [ 622.420735][T31199] ? vfs_get_super+0x260/0x260 [ 622.425502][T31199] ? security_capable+0x9b/0xd0 [ 622.430372][T31199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.436612][T31199] ? ns_capable_common+0x93/0x100 [ 622.441646][T31199] ? get_anon_bdev+0xc0/0xc0 [ 622.441833][T31211] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.446231][T31199] sget+0x10c/0x150 [ 622.446249][T31199] ? ovl_show_options+0x550/0x550 [ 622.446265][T31199] mount_nodev+0x31/0x110 [ 622.446282][T31199] ovl_mount+0x2d/0x40 [ 622.446297][T31199] ? ovl_own_xattr_set+0x10/0x10 [ 622.446314][T31199] legacy_get_tree+0xf2/0x200 [ 622.446332][T31199] vfs_get_tree+0x123/0x450 [ 622.446353][T31199] do_mount+0x1622/0x2fa0 [ 622.446378][T31199] ? copy_mount_string+0x40/0x40 [ 622.446399][T31199] ? kmem_cache_alloc_trace+0x354/0x760 10:19:48 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xc00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 622.446431][T31199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.446451][T31199] ? copy_mount_options+0x30e/0x440 [ 622.512090][T31199] ksys_mount+0xdb/0x150 [ 622.516348][T31199] __x64_sys_mount+0xbe/0x150 [ 622.521036][T31199] do_syscall_64+0x1a3/0x800 [ 622.525633][T31199] ? syscall_return_slowpath+0x5f0/0x5f0 [ 622.531269][T31199] ? prepare_exit_to_usermode+0x232/0x3b0 [ 622.537000][T31199] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 622.540081][T31219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:48 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1b00, 0xd1) [ 622.542554][T31199] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.542568][T31199] RIP: 0033:0x458099 [ 622.542584][T31199] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 622.542592][T31199] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 622.542608][T31199] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:48 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xd00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:48 executing program 5 (fault-call:1 fault-nth:38): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 622.542617][T31199] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 622.542627][T31199] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 622.542636][T31199] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 622.542644][T31199] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 622.561815][T31212] overlayfs: './file0' not a directory 10:19:48 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) acct(&(0x7f0000000040)='./file0\x00') write$binfmt_aout(r1, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x4140, 0x0) 10:19:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0xfffffdd1, 0xfa00, {0x0, 0x0, 0x0, 0x800100f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e23, 0x100000000, @empty}, r2}}, 0x38) 10:19:48 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = accept(r0, 0x0, &(0x7f0000000140)) accept$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) sendto$packet(r1, &(0x7f0000000040)="db3d54ea58f03beabad0aac39be96d3475cb936eeb34d430893d71bdd33c9e77777fa4aab0e0ea6bd570266991189afdd2a7a89722263cf27776343b73b9d867c3ecee9ac7725ce88686656ada18cf01eff1dd1aa3fb1985f3cd5b03c8e5467bfcec523545e223719a2c04d4d19b8b85e0e3c33f2c503ac3a1991c9b59de992091077679081f0177d97f5abe8b8d8418e381358d68714f6d29f829b43225a533dc944a7ee12abf24c413854366f635724800e63e1a9da98c39e7e4627c3a57f75f12d7505fb531941f34320b88f9650a6f2b404745f28be0999fe372edbdb483a58ade56e434c12393d8cf6235b8e9de35f06e20a62c2e", 0xf7, 0x8881, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 622.736721][T31226] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.747131][T31230] FAULT_INJECTION: forcing a failure. [ 622.747131][T31230] name failslab, interval 1, probability 0, space 0, times 0 [ 622.773960][T31230] CPU: 0 PID: 31230 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 622.783004][T31230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.793060][T31230] Call Trace: [ 622.796360][T31230] dump_stack+0x1db/0x2d0 [ 622.800713][T31230] ? dump_stack_print_info.cold+0x20/0x20 [ 622.806442][T31230] ? __x64_sys_mount+0xbe/0x150 [ 622.811299][T31230] ? do_syscall_64+0x1a3/0x800 [ 622.816070][T31230] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 622.822140][T31230] ? print_usage_bug+0xd0/0xd0 [ 622.826914][T31230] should_fail.cold+0xa/0x14 [ 622.831965][T31230] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 622.836018][T31238] Process accounting resumed [ 622.837777][T31230] ? ___might_sleep+0x1e7/0x310 [ 622.837795][T31230] ? arch_local_save_flags+0x50/0x50 [ 622.837820][T31230] __should_failslab+0x121/0x190 [ 622.837839][T31230] should_failslab+0x9/0x14 [ 622.837853][T31230] kmem_cache_alloc_trace+0x2d1/0x760 [ 622.837879][T31230] __memcg_init_list_lru_node+0xef/0x2e0 [ 622.873233][T31230] ? kvfree_rcu+0x20/0x20 [ 622.877565][T31230] ? __kmalloc_node+0x4e/0x70 [ 622.879777][T31236] Process accounting resumed 10:19:48 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x1020, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:48 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x400) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x1ff, {0xae6, 0x5934, 0x81, 0x6, 0x1, 0x4}}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)=r0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) [ 622.882247][T31230] __list_lru_init+0x4d9/0x850 [ 622.882272][T31230] ? list_lru_destroy+0x520/0x520 [ 622.896753][T31230] ? down_read+0x120/0x120 [ 622.901180][T31230] ? init_wait_entry+0x1c0/0x1c0 [ 622.906129][T31230] alloc_super+0x8f2/0xa10 [ 622.910552][T31230] ? destroy_unused_super.part.0+0x110/0x110 [ 622.916555][T31230] sget_userns+0x164/0x6c0 [ 622.920982][T31230] ? get_anon_bdev+0xc0/0xc0 [ 622.925582][T31230] ? vfs_get_super+0x260/0x260 [ 622.930344][T31230] ? security_capable+0x9b/0xd0 10:19:48 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008112, &(0x7f0000000200)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000001c0)={0x101}) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6e0, 0x80200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0x3, 0xfffffffffffffffd}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xad, 0x8, 0x156a}) [ 622.935205][T31230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 622.940122][T31243] overlayfs: './file0' not a directory [ 622.941445][T31230] ? ns_capable_common+0x93/0x100 [ 622.952016][T31230] ? get_anon_bdev+0xc0/0xc0 [ 622.956613][T31230] sget+0x10c/0x150 [ 622.960432][T31230] ? ovl_show_options+0x550/0x550 [ 622.965464][T31230] mount_nodev+0x31/0x110 [ 622.969802][T31230] ovl_mount+0x2d/0x40 [ 622.973876][T31230] ? ovl_own_xattr_set+0x10/0x10 [ 622.979566][T31230] legacy_get_tree+0xf2/0x200 [ 622.984248][T31230] vfs_get_tree+0x123/0x450 [ 622.988758][T31230] do_mount+0x1622/0x2fa0 [ 622.993101][T31230] ? copy_mount_string+0x40/0x40 [ 622.998048][T31230] ? kmem_cache_alloc_trace+0x354/0x760 [ 623.003609][T31230] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.009860][T31230] ? copy_mount_options+0x30e/0x440 [ 623.015066][T31230] ksys_mount+0xdb/0x150 [ 623.019320][T31230] __x64_sys_mount+0xbe/0x150 [ 623.024013][T31230] do_syscall_64+0x1a3/0x800 [ 623.028611][T31230] ? syscall_return_slowpath+0x5f0/0x5f0 10:19:48 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x2000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 623.034254][T31230] ? prepare_exit_to_usermode+0x232/0x3b0 [ 623.039984][T31230] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 623.045545][T31230] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.051432][T31230] RIP: 0033:0x458099 [ 623.055326][T31230] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.074946][T31230] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:19:49 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1e00, 0xd1) 10:19:49 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/53) 10:19:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:49 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x2010, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 623.083374][T31230] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 623.091352][T31230] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 623.099346][T31230] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 623.107332][T31230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 623.115307][T31230] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:49 executing program 5 (fault-call:1 fault-nth:39): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:49 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000240)=0x1c) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000340)={0x3, @null, r5}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x61, "0fb0b96ecbee8d8689f76039213ebbda6305e6d579e8f732657805d35bf6ce95edeb9244be98b41eb33ee3c95b59e0841658f4a5466c2a56e4411c817ddb33d9f7f4ed516f1d7c70b1861ba60f54def2ae17645f46a5b038e1d8ae07567019bb2a"}, &(0x7f0000000100)=0x69) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000140)={r6, 0x401}, &(0x7f0000000180)=0x8) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x101041, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xb, 0xf, 0xc, "e347527c6cbb0a53e383231dacf8c6ccf64c2b3d92140e2ee3f1b71da7757825faf73e68a5a712b71077f54ad5f0dc908d705388a2fe4837976955a5f9417d3f", "79ca4f00950bcb8f7fa78319d87ad64aa97f16d3281ba941b760556f1e9a90ba", [0x5, 0x8]}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) pkey_alloc(0x0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f00000000c0)={r3, &(0x7f0000000040)=""/85}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000400)=ANY=[@ANYBLOB="4cb2b1ed5dd7d6cfbfa553c5fdb6ad0a0bcdbda07d7effbf294615af66a5bbafcfb81aa150347fb3e3ad37c1bf4c40c0d92b97d4d78608f9826e682fe97ff6e052f8a555468d3107c06fadc5e01581fc13896e0d8a53a8c0f15ca5a0a0663b79b96aab2f4e7b283b1d295fcb85727ee9c97d25f756fe904b3c65bcad23162bda07004842f1c0344a669d7e58c4bb79d266f4fa01f0553ef864fb3e06a7d61f87b855f6512c43239fced57d3461852b3c541c4fbdc5374a86080dfd94bd072c9727caa5c960f75e51ceac7a30f655d5c64119b2f8ae8226cc36a823ae59f647266882507888ca"]) 10:19:49 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3a00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 623.219204][T31265] overlayfs: './file0' not a directory 10:19:49 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x600, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x3, @mcast1, 0x4d69}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x20}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x80000000, @local, 0x81}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={r1, 0xcb4}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x6, @loopback}, 0x1c) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r3, 0x0, 0x0) [ 623.270463][T31271] overlayfs: './file0' not a directory 10:19:49 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/47, 0x5}) r2 = dup(r0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x1010, r2, 0x0) [ 623.331733][T31278] FAULT_INJECTION: forcing a failure. [ 623.331733][T31278] name failslab, interval 1, probability 0, space 0, times 0 [ 623.366259][T31278] CPU: 1 PID: 31278 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 623.375441][T31278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.385483][T31278] Call Trace: [ 623.388760][T31278] dump_stack+0x1db/0x2d0 [ 623.393075][T31278] ? dump_stack_print_info.cold+0x20/0x20 [ 623.398782][T31278] ? __x64_sys_mount+0xbe/0x150 [ 623.403615][T31278] ? do_syscall_64+0x1a3/0x800 [ 623.408364][T31278] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.414415][T31278] ? print_usage_bug+0xd0/0xd0 [ 623.419169][T31278] should_fail.cold+0xa/0x14 [ 623.423744][T31278] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 623.429540][T31278] ? ___might_sleep+0x1e7/0x310 [ 623.434377][T31278] ? arch_local_save_flags+0x50/0x50 [ 623.439651][T31278] __should_failslab+0x121/0x190 [ 623.444573][T31278] should_failslab+0x9/0x14 [ 623.449084][T31278] kmem_cache_alloc_trace+0x2d1/0x760 [ 623.454559][T31278] __memcg_init_list_lru_node+0xef/0x2e0 [ 623.460179][T31278] ? kvfree_rcu+0x20/0x20 [ 623.464494][T31278] ? __kmalloc_node+0x4e/0x70 [ 623.469275][T31278] __list_lru_init+0x4d9/0x850 [ 623.474022][T31278] ? list_lru_destroy+0x520/0x520 [ 623.479032][T31278] ? down_read+0x120/0x120 [ 623.483434][T31278] ? init_wait_entry+0x1c0/0x1c0 [ 623.488365][T31278] alloc_super+0x8f2/0xa10 [ 623.492774][T31278] ? destroy_unused_super.part.0+0x110/0x110 [ 623.498753][T31278] sget_userns+0x164/0x6c0 [ 623.503153][T31278] ? get_anon_bdev+0xc0/0xc0 [ 623.507731][T31278] ? vfs_get_super+0x260/0x260 [ 623.512477][T31278] ? security_capable+0x9b/0xd0 [ 623.517311][T31278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.523544][T31278] ? ns_capable_common+0x93/0x100 [ 623.528557][T31278] ? get_anon_bdev+0xc0/0xc0 [ 623.533132][T31278] sget+0x10c/0x150 [ 623.536926][T31278] ? ovl_show_options+0x550/0x550 [ 623.541933][T31278] mount_nodev+0x31/0x110 [ 623.546245][T31278] ovl_mount+0x2d/0x40 [ 623.550295][T31278] ? ovl_own_xattr_set+0x10/0x10 [ 623.555313][T31278] legacy_get_tree+0xf2/0x200 [ 623.559985][T31278] vfs_get_tree+0x123/0x450 [ 623.564474][T31278] do_mount+0x1622/0x2fa0 [ 623.568796][T31278] ? copy_mount_string+0x40/0x40 [ 623.573721][T31278] ? kmem_cache_alloc_trace+0x354/0x760 [ 623.579257][T31278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 623.585485][T31278] ? copy_mount_options+0x30e/0x440 [ 623.590670][T31278] ksys_mount+0xdb/0x150 [ 623.594898][T31278] __x64_sys_mount+0xbe/0x150 [ 623.599564][T31278] do_syscall_64+0x1a3/0x800 [ 623.604142][T31278] ? syscall_return_slowpath+0x5f0/0x5f0 [ 623.609761][T31278] ? prepare_exit_to_usermode+0x232/0x3b0 [ 623.615466][T31278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 623.621000][T31278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 623.626978][T31278] RIP: 0033:0x458099 [ 623.630864][T31278] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 623.650461][T31278] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 623.658858][T31278] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 623.666813][T31278] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 623.674778][T31278] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xca, "ab29ce28ac5c4e07b8862cb8a4bbbb584db26bb816656abab048c41b8fd6489c2e36da56c0ffc33fbe9229dead99ef3a7de5f9dab2aa645ab0a219d1f046bd15c039bf502c83989c4a231bef876acdbc5b5476c5e6285267b4259f00664c1b6a731edaaedff560f9e9bb09e7cdad98262b4edfb35d7786654aab187598983ff5970537eee381e5415a09d63ca8b99e5b9b3338f57cb81f846cb0530e77843b27e6e9d8a7706be5cdbc35921b17afb51fca8c8ca56ea5cdee4f971eae622daf2ede2ece5a8a6950c85b10"}, &(0x7f0000000040)=0xd2) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0x40}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:49 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3f00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:49 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2000, 0xd1) 10:19:49 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = accept$inet(0xffffffffffffff9c, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80081, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc3b1f00bc483188a027ef164344476bf8b845ea6e10542e27268beb80c5b566de274a6e") prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 623.682733][T31278] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 623.690688][T31278] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:49 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x4000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x3ff, @rand_addr="e92920a0149333a2260018d12b73212f", 0xffffffff}}}, 0x84) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 623.805117][T31295] overlayfs: './file0' not a directory [ 623.831836][T31297] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 623.860972][T31298] overlayfs: './file0' not a directory 10:19:49 executing program 5 (fault-call:1 fault-nth:40): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:49 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x111, 0xa}}, 0x20) getsockopt$inet_dccp_int(r0, 0x21, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r2, 0x541b, 0x0) 10:19:49 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x4800, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:49 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757070657264010000002f79696c65302c6c6f7765726469723d2e2f66696c65302c776f726b6469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:49 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2100, 0xd1) 10:19:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x80000000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 623.972936][T31309] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 623.986767][T31311] overlayfs: unrecognized mount option "upperd" or missing value 10:19:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) r1 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000001c0)="a397baa9084aa7a7d92ffa03d5e8ade0e6ef94342b0e56ea90e54ade9268f5a4f192073b1f5739bb420c692586e0b56d15c5240d178e8831eee657346401e38e94449942a81104e12cda16218a1df1ab0a899c72ad4988ea31f771d0ee8eeaf715b34e1bc62a0f8e61f5712af21c52aec9bfd7eaadb1fa27aeac200d1c027cb99f75f366ad94aff8688b042af2a9518ea1fcc557ae216cba912c21f390698500122e90a2b4ceea010cf18571d27a48c88149e871ece2661e8737f7ad9165d3187c11", 0xc2, 0xfffffffffffffff8) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/1, 0x2ff) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:49 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x6, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={&(0x7f0000000080)="07e4298bb7869d18e324f6dcb26a7d4b18a8cde80a8ad22302bbdfcbbafca0ab7a164aeb467e24aed96120471f358641652460eb7fb96b2b116b3f9a3ab5002bc2110667991416331f9d3ecd80f55de91279ec750a3850c214a2718a42731e695c118a33", &(0x7f0000000100)="136717c23a485d393742e41f492408f9fb64377bf2ef924e1101f3460d202b64201b720e5db5472494444112ce9cc7a93b00f976db5b82f9910a620b8e3fb90963f754547e5db8ab43348b081d717625c8f97bcb718dcc863f9f5519298c307f5a44bb4e3d1bc73c043851e57f7fdf3923d1d095d89ea12cffbfe9700d147bd4a1aac46611623e6eeed62c5a8a649ea6e62a703adee48b1e60461f94d304c42f021eacbdd303083dafa2738d462a960aff6e8968c5733e26884004a1c75deb392dec57de2953391c9ffc"}}, &(0x7f0000000240)=0x0) timer_getoverrun(r2) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r3 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x0, 0x40000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000002c0)={0x6}, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 624.036818][T31319] overlayfs: unrecognized mount option "upperd" or missing value [ 624.053007][T31320] FAULT_INJECTION: forcing a failure. [ 624.053007][T31320] name failslab, interval 1, probability 0, space 0, times 0 [ 624.084780][T31320] CPU: 1 PID: 31320 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 624.092147][T31325] overlayfs: './file0' not a directory [ 624.093835][T31320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.109330][T31320] Call Trace: [ 624.112632][T31320] dump_stack+0x1db/0x2d0 [ 624.116967][T31320] ? dump_stack_print_info.cold+0x20/0x20 [ 624.122686][T31320] ? __x64_sys_mount+0xbe/0x150 [ 624.127536][T31320] ? do_syscall_64+0x1a3/0x800 [ 624.132315][T31320] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.138393][T31320] ? print_usage_bug+0xd0/0xd0 [ 624.143167][T31320] should_fail.cold+0xa/0x14 [ 624.147770][T31320] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 624.153594][T31320] ? ___might_sleep+0x1e7/0x310 [ 624.158444][T31320] ? arch_local_save_flags+0x50/0x50 [ 624.163716][T31320] __should_failslab+0x121/0x190 [ 624.168635][T31320] should_failslab+0x9/0x14 [ 624.173129][T31320] kmem_cache_alloc_trace+0x2d1/0x760 [ 624.178520][T31320] __memcg_init_list_lru_node+0xef/0x2e0 10:19:50 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x4c00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:50 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x5c00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 624.184160][T31320] ? kvfree_rcu+0x20/0x20 [ 624.185915][T31331] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 624.188489][T31320] ? __kmalloc_node+0x4e/0x70 [ 624.188512][T31320] __list_lru_init+0x4d9/0x850 [ 624.188531][T31320] ? list_lru_destroy+0x520/0x520 [ 624.211184][T31320] ? down_read+0x120/0x120 [ 624.215607][T31320] ? init_wait_entry+0x1c0/0x1c0 [ 624.220569][T31320] alloc_super+0x8f2/0xa10 [ 624.225002][T31320] ? destroy_unused_super.part.0+0x110/0x110 [ 624.231003][T31320] sget_userns+0x164/0x6c0 10:19:50 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x6000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:50 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x6800, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 624.235428][T31320] ? get_anon_bdev+0xc0/0xc0 [ 624.240024][T31320] ? vfs_get_super+0x260/0x260 [ 624.244793][T31320] ? security_capable+0x9b/0xd0 [ 624.249650][T31320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 624.255896][T31320] ? ns_capable_common+0x93/0x100 [ 624.260934][T31320] ? get_anon_bdev+0xc0/0xc0 [ 624.265526][T31320] sget+0x10c/0x150 [ 624.269340][T31320] ? ovl_show_options+0x550/0x550 [ 624.274367][T31320] mount_nodev+0x31/0x110 [ 624.278702][T31320] ovl_mount+0x2d/0x40 [ 624.282775][T31320] ? ovl_own_xattr_set+0x10/0x10 [ 624.287717][T31320] legacy_get_tree+0xf2/0x200 [ 624.292405][T31320] vfs_get_tree+0x123/0x450 [ 624.296921][T31320] do_mount+0x1622/0x2fa0 [ 624.301276][T31320] ? copy_mount_string+0x40/0x40 [ 624.306224][T31320] ? kmem_cache_alloc_trace+0x354/0x760 [ 624.311785][T31320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 624.318006][T31320] ? copy_mount_options+0x30e/0x440 [ 624.323186][T31320] ksys_mount+0xdb/0x150 [ 624.327421][T31320] __x64_sys_mount+0xbe/0x150 [ 624.332084][T31320] do_syscall_64+0x1a3/0x800 [ 624.336662][T31320] ? syscall_return_slowpath+0x5f0/0x5f0 [ 624.342278][T31320] ? prepare_exit_to_usermode+0x232/0x3b0 [ 624.347979][T31320] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 624.353510][T31320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.359384][T31320] RIP: 0033:0x458099 [ 624.363262][T31320] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.382860][T31320] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 624.391256][T31320] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 624.399227][T31320] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 624.407202][T31320] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 624.415152][T31320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 624.423104][T31320] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:50 executing program 5 (fault-call:1 fault-nth:41): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:50 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x6c00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:50 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x1010, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [{@pcr={'pcr', 0x3d, 0x39}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', r0}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@subj_user={'subj_user', 0x3d, '\'\x85'}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x77, 0x33, 0x64, 0x7e, 0x62, 0x37, 0x66], 0x2d, [0x77, 0x34, 0x75, 0x33], 0x2d, [0x76, 0x0, 0x77, 0x63], 0x2d, [0x39, 0x77, 0x77, 0x62], 0x2d, [0x64, 0x65, 0x37, 0x37, 0x65, 0x32, 0x0, 0x61]}}}, {@smackfsdef={'smackfsdef'}}, {@audit='audit'}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 10:19:50 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x208200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x3, r2}) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) 10:19:50 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2400, 0xd1) 10:19:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f00000001c0)="0af51f023c123f3188a0700432e244f643887e00a22975bf9d075729f6d5e89578105535b4e846e1c8dfc8fca8bed20fd0396fbd24586fe3ade9fd29a9206ed4723336702af82536364f9595f8b48c6e61865baa8681c4436418331790cf614e1f7cf1") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x3, {0xa, 0x4e21, 0x3137, @local, 0x621b}, r2}}, 0x38) 10:19:50 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="75707067726469723d2e2f66696c65302c6c6f776572646d723e2e2f66696c652eea52696c65315c00"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) poll(&(0x7f00000000c0)=[{r1, 0x40}, {r1, 0x8000}, {r0, 0x8000}, {r0, 0x8000}, {r2, 0x4380}], 0x5, 0x9) write$binfmt_aout(r2, 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140)) 10:19:50 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x5, 0x6}) ioctl$KDSKBLED(r1, 0x4b65, 0xfffffffffffffffd) ioctl$SIOCRSACCEPT(r1, 0x89e3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:50 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x7400, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 624.555694][T31351] FAULT_INJECTION: forcing a failure. [ 624.555694][T31351] name failslab, interval 1, probability 0, space 0, times 0 10:19:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400003, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r2, 0xfffffffffffffe01}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r3 = fcntl$getown(r1, 0x9) syz_open_procfs(r3, &(0x7f0000000140)='attr/keycreate\x00') r4 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 624.622269][T31351] CPU: 1 PID: 31351 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 624.631331][T31351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.641499][T31351] Call Trace: [ 624.644809][T31351] dump_stack+0x1db/0x2d0 [ 624.649149][T31351] ? dump_stack_print_info.cold+0x20/0x20 [ 624.654879][T31351] ? __x64_sys_mount+0xbe/0x150 [ 624.659732][T31351] ? do_syscall_64+0x1a3/0x800 [ 624.664509][T31351] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 10:19:50 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x101000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:50 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000240)={0x1, 0x2}, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) write$vhci(r2, &(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, "1880f5edd9e661e90decc48d4f9c2e84e3373c17ce2abfc75b5b1b89e16b2242c2e3d2463a91d7c197821772eb0a5b93a9c32416fcdfb464c995153926292420a21f7ccd33e21bfde3a009797291368d6f307bd4b0c7d57a8a9371fb65ddd67311c4adc9ff660b128913e566d55577949e8a6b0923ae3d3b4536ee606991a72008d2ff4301cc65e9fd27a5138e9bff394eb315cb8006096ab20637a80f7a579a51721c1085411b8d84a29f2a992750a28f1997a9b194055776df35"}, 0xbc) r3 = semget$private(0x0, 0x4, 0x400) semctl$GETNCNT(r3, 0x6, 0xe, &(0x7f0000000100)=""/223) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000340)) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000080)={0xa4, 0x8001, 0xfff, {}, 0x3, 0x6}) [ 624.670583][T31351] ? print_usage_bug+0xd0/0xd0 [ 624.675360][T31351] should_fail.cold+0xa/0x14 [ 624.679959][T31351] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 624.685897][T31351] ? ___might_sleep+0x1e7/0x310 [ 624.690768][T31351] ? arch_local_save_flags+0x50/0x50 [ 624.696258][T31351] __should_failslab+0x121/0x190 [ 624.701211][T31351] should_failslab+0x9/0x14 [ 624.705725][T31351] kmem_cache_alloc_trace+0x2d1/0x760 [ 624.711116][T31351] __memcg_init_list_lru_node+0xef/0x2e0 [ 624.716765][T31351] ? kvfree_rcu+0x20/0x20 [ 624.721107][T31351] ? __kmalloc_node+0x4e/0x70 [ 624.725798][T31351] __list_lru_init+0x4d9/0x850 [ 624.730573][T31351] ? list_lru_destroy+0x520/0x520 [ 624.735605][T31351] ? down_read+0x120/0x120 [ 624.740031][T31351] ? init_wait_entry+0x1c0/0x1c0 [ 624.744979][T31351] alloc_super+0x8f2/0xa10 [ 624.749512][T31351] ? destroy_unused_super.part.0+0x110/0x110 [ 624.755516][T31351] sget_userns+0x164/0x6c0 [ 624.759937][T31351] ? get_anon_bdev+0xc0/0xc0 [ 624.764538][T31351] ? vfs_get_super+0x260/0x260 [ 624.764985][T31368] overlayfs: unrecognized mount option "uppgrdir=./file0" or missing value [ 624.769296][T31351] ? security_capable+0x9b/0xd0 [ 624.769323][T31351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 624.769338][T31351] ? ns_capable_common+0x93/0x100 [ 624.769359][T31351] ? get_anon_bdev+0xc0/0xc0 [ 624.789563][T31368] overlayfs: unrecognized mount option "uppgrdir=./file0" or missing value [ 624.794019][T31351] sget+0x10c/0x150 [ 624.794038][T31351] ? ovl_show_options+0x550/0x550 [ 624.794054][T31351] mount_nodev+0x31/0x110 [ 624.794076][T31351] ovl_mount+0x2d/0x40 [ 624.824508][T31351] ? ovl_own_xattr_set+0x10/0x10 [ 624.829453][T31351] legacy_get_tree+0xf2/0x200 [ 624.834503][T31351] vfs_get_tree+0x123/0x450 [ 624.839141][T31351] do_mount+0x1622/0x2fa0 [ 624.843498][T31351] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 624.848965][T31351] ? copy_mount_string+0x40/0x40 [ 624.853911][T31351] ? copy_mount_options+0x255/0x440 [ 624.859114][T31351] ? copy_mount_options+0x1de/0x440 [ 624.864340][T31351] ? __sanitizer_cov_trace_pc+0x8/0x50 [ 624.869804][T31351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 624.876055][T31351] ? copy_mount_options+0x30e/0x440 [ 624.881249][T31351] ksys_mount+0xdb/0x150 [ 624.885475][T31351] __x64_sys_mount+0xbe/0x150 [ 624.890136][T31351] do_syscall_64+0x1a3/0x800 [ 624.894707][T31351] ? syscall_return_slowpath+0x5f0/0x5f0 [ 624.900321][T31351] ? prepare_exit_to_usermode+0x232/0x3b0 [ 624.906034][T31351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 624.911563][T31351] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.917432][T31351] RIP: 0033:0x458099 [ 624.921306][T31351] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.940889][T31351] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 624.949277][T31351] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 624.957231][T31351] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 624.965182][T31351] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:50 executing program 5 (fault-call:1 fault-nth:42): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:50 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) 10:19:50 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = dup(0xffffffffffffff9c) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040), 0x4) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r1 = getpgrp(0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) fcntl$setown(r0, 0x8, r1) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x100}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)) r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r3) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000400)={0xfffffffffffffffe, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e21, @loopback}}}, 0x108) r4 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r4, 0x0, 0x0) 10:19:50 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x7a00, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 624.973154][T31351] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 624.981105][T31351] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 625.035588][T31377] overlayfs: unrecognized mount option "upperd?r=./file0" or missing value [ 625.041384][T31374] overlayfs: './file0' not a directory [ 625.048660][T31383] FAULT_INJECTION: forcing a failure. [ 625.048660][T31383] name failslab, interval 1, probability 0, space 0, times 0 [ 625.077919][T31377] overlayfs: unrecognized mount option "upperd?r=./file0" or missing value [ 625.086663][T31383] CPU: 1 PID: 31383 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 625.095694][T31383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.105770][T31383] Call Trace: [ 625.109071][T31383] dump_stack+0x1db/0x2d0 [ 625.113511][T31383] ? dump_stack_print_info.cold+0x20/0x20 [ 625.119224][T31383] ? __x64_sys_mount+0xbe/0x150 [ 625.124058][T31383] ? do_syscall_64+0x1a3/0x800 [ 625.128801][T31383] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.134859][T31383] ? print_usage_bug+0xd0/0xd0 [ 625.139620][T31383] should_fail.cold+0xa/0x14 [ 625.144202][T31383] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 625.150020][T31383] ? ___might_sleep+0x1e7/0x310 [ 625.154851][T31383] ? arch_local_save_flags+0x50/0x50 [ 625.160119][T31383] __should_failslab+0x121/0x190 [ 625.165039][T31383] should_failslab+0x9/0x14 [ 625.169520][T31383] kmem_cache_alloc_trace+0x2d1/0x760 [ 625.174877][T31383] __memcg_init_list_lru_node+0xef/0x2e0 [ 625.180503][T31383] ? kvfree_rcu+0x20/0x20 [ 625.184826][T31383] ? __kmalloc_node+0x4e/0x70 [ 625.189486][T31383] __list_lru_init+0x4d9/0x850 [ 625.194244][T31383] ? list_lru_destroy+0x520/0x520 [ 625.199265][T31383] ? down_read+0x120/0x120 [ 625.203662][T31383] ? init_wait_entry+0x1c0/0x1c0 [ 625.208605][T31383] alloc_super+0x8f2/0xa10 [ 625.213004][T31383] ? destroy_unused_super.part.0+0x110/0x110 [ 625.218987][T31383] sget_userns+0x164/0x6c0 [ 625.223383][T31383] ? get_anon_bdev+0xc0/0xc0 [ 625.227954][T31383] ? vfs_get_super+0x260/0x260 [ 625.232711][T31383] ? security_capable+0x9b/0xd0 [ 625.237559][T31383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 625.243781][T31383] ? ns_capable_common+0x93/0x100 [ 625.248788][T31383] ? get_anon_bdev+0xc0/0xc0 [ 625.253358][T31383] sget+0x10c/0x150 [ 625.257162][T31383] ? ovl_show_options+0x550/0x550 [ 625.262171][T31383] mount_nodev+0x31/0x110 [ 625.266506][T31383] ovl_mount+0x2d/0x40 [ 625.270563][T31383] ? ovl_own_xattr_set+0x10/0x10 [ 625.275493][T31383] legacy_get_tree+0xf2/0x200 [ 625.280156][T31383] vfs_get_tree+0x123/0x450 [ 625.284652][T31383] do_mount+0x1622/0x2fa0 [ 625.288969][T31383] ? copy_mount_string+0x40/0x40 [ 625.293893][T31383] ? kmem_cache_alloc_trace+0x354/0x760 [ 625.299422][T31383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 625.305640][T31383] ? _copy_from_user+0xdd/0x150 [ 625.310483][T31383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 625.316716][T31383] ? copy_mount_options+0x30e/0x440 [ 625.321909][T31383] ksys_mount+0xdb/0x150 [ 625.326167][T31383] __x64_sys_mount+0xbe/0x150 [ 625.330855][T31383] do_syscall_64+0x1a3/0x800 [ 625.335432][T31383] ? syscall_return_slowpath+0x5f0/0x5f0 [ 625.341046][T31383] ? prepare_exit_to_usermode+0x232/0x3b0 [ 625.346747][T31383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 625.352280][T31383] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.358151][T31383] RIP: 0033:0x458099 [ 625.362045][T31383] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 625.381642][T31383] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 625.390034][T31383] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 625.397985][T31383] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 625.405945][T31383] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 625.413895][T31383] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 625.421845][T31383] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 625.431980][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 625.431994][ T26] audit: type=1804 audit(1547720391.311:432): pid=31377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1168/file0/file0" dev="sda1" ino=16548 res=1 10:19:51 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xedc0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xfc) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000040)={0x0, 0x20}) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x8, 0x3f, 0x7, 0x6, 0x15, 0x2, 0x0, 0x81, 0x100000000, 0x7}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:51 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffff7a00, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="5db34d2587724ef16554", 0xa}], 0x2000, &(0x7f0000000140)={[{@nobarrier='nobarrier'}], [{@subj_type={'subj_type', 0x3d, 'securitywlan1{'}}, {@obj_user={'obj_user', 0x3d, '+'}}, {@subj_role={'subj_role', 0x3d, 'vboxnet1systemnodevmd5sum\\@'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@measure='measure'}, {@hash='hash'}]}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:51 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) r1 = geteuid() r2 = request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='workdir', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r1, r2) write$binfmt_aout(r0, 0x0, 0xfffffffffffffd57) 10:19:51 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2700, 0xd1) 10:19:51 executing program 5 (fault-call:1 fault-nth:43): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 625.499300][ T26] audit: type=1804 audit(1547720391.311:433): pid=31385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1168/file0/file0" dev="sda1" ino=16548 res=1 [ 625.549383][T31396] FAULT_INJECTION: forcing a failure. [ 625.549383][T31396] name failslab, interval 1, probability 0, space 0, times 0 10:19:51 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x1000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = fcntl$getown(r0, 0x9) ptrace$getsig(0x4202, r1, 0x8, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x1, 0x2) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0xa) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x40000) connect$caif(r3, &(0x7f0000000040)=@rfm={0x25, 0x7, "ba5222af8ad5dcea38584387b9805725"}, 0x18) r4 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) getsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000000140), &(0x7f00000001c0)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 625.604125][T31402] overlayfs: './file0' not a directory [ 625.609577][T31396] CPU: 1 PID: 31396 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 625.618698][T31396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.628759][T31396] Call Trace: [ 625.632065][T31396] dump_stack+0x1db/0x2d0 [ 625.636416][T31396] ? dump_stack_print_info.cold+0x20/0x20 [ 625.642142][T31396] ? __x64_sys_mount+0xbe/0x150 [ 625.647008][T31396] ? do_syscall_64+0x1a3/0x800 [ 625.651782][T31396] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.657856][T31396] ? print_usage_bug+0xd0/0xd0 [ 625.662633][T31396] should_fail.cold+0xa/0x14 [ 625.667240][T31396] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 625.673056][T31396] ? ___might_sleep+0x1e7/0x310 [ 625.678044][T31396] ? arch_local_save_flags+0x50/0x50 [ 625.683342][T31396] __should_failslab+0x121/0x190 10:19:51 executing program 3: umount2(&(0x7f0000000040)='./file0\x00', 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x8140) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @broadcast}, 0x2, 0x3, 0x1, 0x1}}, 0x2e) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffff7fff, 0xa, 0x5, 0x0, "f38721d8ac3ef0dba381a7c2c6c85723adc768262a8b433a1daedecc4c880f57da481003ff1b8e074b58463be274baaa157fcb431ba714319f87bdcfe7d6889b", "5ef1012c00e32949ff12db22015bb23f89f77126f9aa65d0172b2cd2fa33b728", [0x6, 0x8]}) sendmsg$nl_route_sched(r1, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x1234, 0x30, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{0x188, 0x1, @m_skbmod={0x184, 0x0, {{0xc, 0x1, 'skbmod\x00'}, {0xb4, 0x2, [@TCA_SKBMOD_SMAC={0xc, 0x4, @random="b3715c5742f5"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000001, 0x3, 0x0, 0x2, 0xffff}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x8, 0xffffffffffffffff, 0x3, 0x3ff}, 0x1}}, @TCA_SKBMOD_DMAC={0xc, 0x3, @dev={[], 0x11}}, @TCA_SKBMOD_SMAC={0xc}, @TCA_SKBMOD_DMAC={0xc, 0x3, @random="f0f0af226705"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x2, 0x30000006, 0x7fffffff, 0x6}, 0x6}}, @TCA_SKBMOD_ETYPE={0x8, 0x5, 0x4}, @TCA_SKBMOD_DMAC={0xc, 0x3, @local}]}, {0xbc, 0x6, "40491158891c2fa703c79d97988091408a08e137b87e7fa2c2c81244b927520e8ef8719cd6df8aff08d28eb75f9a3afe059a95a344c8ec0e525d646a6410adb739789852d200e38b67a835470e25d68bb8f8d24b4044a56d47d39cc47c22793483a0fd359dadf5da199b0958683b12fcf3245ec4f2ab41a7c5544b178f7e9fd29198f2364fc37e8af3bc4bb1252316993dd98f4f03a45c3295a0f1a7efd62e857094bec8c50ad376de44e04f43fc345aee0ae6eb64e29707"}}}}, {0x1098, 0x1, @m_sample={0x1094, 0x1d, {{0xc, 0x1, 'sample\x00'}, {0x7c, 0x2, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x28}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x9, 0x1000000d, 0xe68, 0x4}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x59}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x6, 0x3, 0x10000002, 0x2, 0x4}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffffffffb02, 0x6, 0x6, 0x20, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3b0e}]}, {0x1004, 0x6, "b402710ab0b9c948b53db8756774cc22443af300aa2dce98699a7ed3e30dd566ba106a108089cb41ef44713aee0a3d5efec9967756305da13fcad6139e3e64faff7710c4a6b25957aaba5fb358b05add5310dac651daf625cb974b3cb295a95d2d2e088ae3e75bb140a58135b70ab3d53fc9da562d7dd1d69043e356eef9ae9efcd99229b03d1aa1c9b2c25c2f57b23bb9344fc68c6aae4ba5a1038aaf1a58e0c00b2c84c03ba5373dec606913c12fe538e4abdb6e984249f62570d229a9fb6a99cd8f0eb11d78d108ebe725b2a38e2e40d3623238bde2d3222d316e1dd34b67512c05958cbde2527ee694d31aa659fe75254bdfaddd7b0fb6dfc23a945e67c01ea052d516048bbea8ab1eba49b7e668fc28a2526e195b4416a6c1b7df5e3f11abac69a1b8eb77dff1f2b6ad7ae6d572fe5391fb500b91ac78a8c2f1dcb0d34fa3b8f0e985e528ce3d15a96013a610f2b25f114ac2ab4ceffbef824bc2ab0dbe48b820887e8b538f779e972fc7193edfa53c53de169be02efc80e926a2ffdd5099bcec548ab11ecf0c2df0d9310895b7f66514a526a3627865bc5d0304f5acfd5349b2ef981d03a181f5658115a3d6a492e62f421efd1534864191bc9ca962208d27bbd961de2d0112bc30444807eedcb9dccac469a0275fbc6dcd7e2c5c2fd1ea00a645ef33d52a45d90912138c37ff52e0f44521d2e8cf34c842e25ad6b3b26cf52430bf8082d6fe2d1f1a0d3174327bc67d3b1cea3b51acbba16888cda8bf0ef435e6f7efb40bdc7875f76a6d735c5cca388bd691056c2f3a57765ec8ac63d8ee10bf55f9bcc31af49b5d205e3fe8e9f7c9f184a378205b67f3d44359eac4f52369c2038bf4022cb365e9bf8ecd51f93bb8cbb64d24bc29f5717b3c9c80f9ef0f4cd367e1ddd0726ebad731df5edc1930334384e7525d99e2418f179502952f0629bb577ffb0d32c570b6b35fd2000e2d0f04ca8f42cf38cd311717bf0004d29b71122a7aae55da087649c74f7fa1e9687ee85733b5bd44f5121e3df6a5eab54c067a028341f1117ecafdd6df97e8053ac633b09d7e7bcb4863b92c6c6df80b7e65b481c70a26bc953255a389bbec9717d093c801ca79fc6eff49c4099c0dff0bd42f5994bb443c94e0540b17fce89371266ea3dac3d6380de792cbb6d5c488615fc448b9e38353c30e711cb7c7228824cebd9dd10972a2dc2e30bc881e5e893ccde0f60f6120cc79223c8c2ac2e7ec9775d8db5fcf0ba8ed6a4448ff9f79fd63dd70b72d2d15afe0a3eb61110e7f4c810b9ddff88e567834609788052e01940a19b828adb68f73434355352787b4f44150ec67a36ef6fcb4113261c01e1bb82fb68e901d1eb96dd0fcf931559ea540257988ae0ba8abd5c32e1848a4a0195dd6bc089a7502c1eb35ce4326d3ae9c4fcaf12c1e64fba7ad6f82cff283dceb31b8295e51b33eff7031ca795c0311ffdf3ac183b196fc91674d52ceff06aa491352f13271f602dc352cb24750b2e556eac9cf3dcf80f378b10a130db03be8e6e939b615a1780408b0411ffb1f03b527a47ca781973189184c95a66847d06a3317ad548d3d20a708a0c2f63c6131ba9a240678e9ca32610edb6ee2ab0a34ead0db227e6dc8906aac841de5d5b2bb5bfc4436eeb302bd9a5c4f075701b40e75e76d5c4160979cbca84a149280f6c8ee18f85dfb9e5ba1cd11f7661787ae20ec7cd85d0354785ca69ba9629ed1c02f12185770fb6cdcb4da48afde4b3995b14e8eb48df9e1698bdb1b1a909b60f7a681ba49901940f0ecd39ca42cc4e6d82968dda2798548ac19712e6d1e25362fc583eb1941bdf4ee938377cda248e1385c07e39a514cebfd60ecd699dd96191e7ea793b1913b486527b447d2474bf03ef69d9aa2f143d1c1117105f77c07e9ec4823ee20af6c67b320f3d05113fa4c678cfcc0a509312949a15745ad7feb4af203bc014be8401d8f0899a4769f0bbb45fe3fb9a5f935d17d85769da2bcc2edc2061d7d41029021478b67a2b96cb0b18b877fe45ea4fb366de640ed1f5e7873b97b30fe0b3c1ade31a00f5f8479444e0814267755c53df2aebdc19a8b1aa3a4b17007d9144e35deb348674e8814a7e6d060a80f7b34e1b29a09c98a2952caac4ba4309b0fbf2ad9daf8e154507a27236526a815c4634842eea77c46e0e882fa0d5fde5c1ef366edec1b106ee27e5087f74de03c1acfd04d120d4df047c99b7936d601480914d9fbf6a60cc19ac8f6dfbebe97056a6d9ad5be68e99f7da18a71c4ec93ed65941e6235bdb81f74794bf96dc93355a74a0ebd1bf22064011c8d564f788cdcfb668de3c04532bf93004dea509c4dd0543d1bb21392e4cfd129e75c6d2a5429837437055171fd28a7b6c97229aaec06b7f818329a4c9417e4d967d0b440ae246106259368f6ff8d83c6c6c04423af47ab5fc957fed9a9af217bb5a580c3af4b7dcdae08240fcc9d086dc5add99c41e3fb92bbfe6e1df4ec6c6ee959a22b5ded4669e8e36f3465199180547fbbc08c9ef8501fc27597a02b68e2fb1dec533fa073bf02a4e3bcb873adf870301bfadcb6ba2148df4992b6b9d0804f11b7096537ad153bac01ed55fdcf9203312b8564b5d503f64386d2c226523528ed853f79e19683ae8bc292058ecc4187639a2cc93567eadcca7ba7eb263e9ab07abef0b44c96643ffc519e69ed064afdc5b2575c272e47528b43ac1ccb9d2a196b68f830fe62908580dac7d9b7161c1a26530ac5f71bc745f816c376f4a4af9fb6bb4c990db6235fcb528e1ce62bde25cf5cb101532e922f6f34c03cad0c6e10b8c40125fb30ec7c595f987d204f2d36faa4bf7d5444b39e2c8d9aad6f59ca5b87b4f61982e58cb30389d6c0ae581c1f75e02210bc9141a055cab02285770af40dfbebbe97da122e516284f625a4ac31033213ca9466b1b2b062a456438e519c22a123d3f004f000fc27b1e03fce776720725f19e06c8ec8d6b5cb777f50993f4ed55b207475ffdcd13b682612a17a598d142e553d44dec59c323ed9e5764e3c95c27989e829cdd8c8e68b15cea48e22a7c89f2cce1c67b151099f8eb1b7a1c3349cb49f663c07434931506eb7939309d72a00fd9a6cfd6544e9c3675658a18edf13e6f82a8b39297bb6cfe3eb6ef0a80c7feea14058c4e17abe73f21e02b8357548e98dfcbabb75efb5677fd0ad5958605511d179384b9f90eb44674e4a378aa425f9e900c97cb8f09d8bc35525233d8432a0fdd07afebf4e4f1deda487bfedd4b58e4671c2b7d5084cc93ea54b3ecb3831ab336af7a46a2d2a0c3318a05952b2c7e25e486215b9d6c02e425fb153ff75bee206ce82c0ee6f1a1c9d4dadb8d10a4bcf4d604a5472380a1be509ffa519fa0f61fa19c494c15268dc938ef59c9845e154cfc8fd4683a958ebb286dde77f578f9f2f440972ac215b9d45e64ff4a0d9b02dd7d9e35713b33e5f9d5d44bad2efb901697469324bc91bf377c0edbc818f17a3e1931d1a8827d6ef523398df05280cdd1c5f156704a522a2f521861e6b67fd333b38a497c133182860f968ff7ee8cca411bb440d47b99cd2331cfac6c5c1588510340abecc7957c5fb7e6b645dddafebf004c80e74ceb414806704c5d9f8d1cbaeb3f4d9ca12dd6c031883ac8e4985b7e27503f1260ac889764a145bf78f3a57a6635774fdcac5a82c8346d754f6714436a3fb014147716d9d9c290cdbb36cd765ec5b36c37845dacaf56acc2db12c5b8cdea2eaaa3ce82da05d13f4b314e5cef9d42cf3e624d75e01383b27a0cb59ace93579aff7e54eaf2f40d87a09217a628f34350a6ed4d23bdc145eb7141239ca0e4368ac2dc97eb6dfedf78309a84bda75de74460487314106183a474a95bd6ce12572e3b7bb66afd5c882d475c8a195c5462ced30ea3137719ab0a9c533072a0157a056e8cad2a7d9179b2c341a9c6c0b4dc3875678090a89c7af039ef0c1561f7c317002b63dbe1c5420f94471c4a7157b3df1892b9e9700ef57acd258e7730c0678d6548885d08a06d0b921d73313b49d3178e1db71485923a46cbc4ca10bd1dfaff604e90f2df776bad07b79ef5a44ff1fb4f2dfd334c2c2bf67910d546aa8dfea1a851295327f51b557a0e34072cd4e9577f2f60526d2eb9bdf2de4bf1939f079962110310b77a2928dd967adb7f54b4a3286b713900ee093d8f0c704813112f4247988f06f8989cd2fc160e2862a5898dae438e463bfde92107e180a45f4397336996c63c5d0fbb4d38d2bea8c34de6cf58c10a61836b3af012c0467d1dacfb8d90f8b87771ec08f50827661de04e5afb409272a70051dd26e1bed1b06e075800f51716c80cb77833092b594a2e93c97ba98d9a58ff2b4342522504ee1062be34297accd94b8870dc214cf8b22abb19d39096db0e5c9f2054fa1ee7b44cff8aa78327eaea56554e96a2e15d1b13fdb9d7c6f5cae0bab62db18ae2b64e05f0c0e9483a6f3539cc688986062d9031e9cb9b52c627f994b02fd44a1269b23e8d040bc81bb807c71e647936e673b667c90657761e7b85d8ebd7ae6844aabe35bf14c8c7af825b12c38ed6f8b5d9e696d8d49b79cbf62ba65f355fbe0edbc6e64cc424217cc6585c0d3d3452563e7031a202d595b70cb65fd0c22549ee6d8d3c2ae8e63dadabfd5580e2db823a667f6050fd926ade1c7638b7c78a363bc416f226c91dd7d88de095dfda1db1766c890e555bc849682b3729806becdc6502175c85c204f75fe887b587589a9edc4e613273318142cc8e43e2e6930d3f61bfa8d7a4c078604dc1589fd651e39693e5a8792938000f03b88376c1557885af06cf02e714ba032ad1bca5fcc5c1f8972d27a5c9dfe98bf213df443f4735af147d5e60996720e3db232099f1cbc1f1bd4394fc019492197f304da9f155304e010730d452c8669607014b0d3498df66074a5f0e37aa53e6b4d2de774ec9f7e7de0c7464958a8ceca32f2e20b1b4bf6df206089bdfa4335391df338715cb2002ae57d20f493b74e6a8c7b4207909afbbb4b9dcd1e0de1141aee6bcdb5ece61e8027289809fa3453ae9e5151ed59ab390446436cc8ba47751662eb9de8f00e1ff421abbcca598b55f1f948846e4cd94bf9b0dd56533551ac5f1b16bf2e0777b5ad5595c0e2df0c27a0b43f02ffbdb9b34a57fafe73290010ae2e4c1aa7cfd3392785453bfc13a2d1725dbc54aff046ea3def93552dc62be379d83c0e7f93f17e6fd753d9a540df95458db5f67b51b7872a7d6a8097a7d07b7bed97fcfba56b5e0d971909486b917ba04698692e8980821ab2c1b2e8e3a8f6c60e7cc012af613b21c55404fdf20e28e45fa1c9aefc84ffe057e3e5e3030ed53049cc3de5095fec1c7a44485afdb6c5f0b999651fb8f02168664bfab0590a183523e909ff82761e46662ff9be6b995b0d3fa09705a35b727b1e91962652b2d0121158b74443548c27c0b4a8380bfc5e427be7ac71bb363383db25c5dcf8b3e7c5bc5e469090a17732d1839f05e2982c871ef16ecd5cc09a5c154c9bd0bc05ba096718cb7f77611c6f8cc71c6b05077d988c38aa1848aaeba0ef152b90b898385425cf555b6dbe0c3b5f645bb24e15a1e102539483083cdf4255eb7b0cbe540b5e29cce45fac25ada3240be4cd9e2ed458907795611adfd49d681eac9cc86b82b7297e057e8511db7286a3f0243483daa3e1d8db8c6ecfebaef440b1a1fb8bce4a2254e4bd21567646b53ded7c56114b8763536b59a1297ac156ca0461a31f4eb8f493397b73bdd031db73912637"}}}}]}, 0x1234}, 0x1, 0x0, 0x0, 0x804}, 0x8841) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0xa, 0xfa00, {0x4, 0x0, 0x10000000000000}}, 0x15) readlinkat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=""/56, 0x38) [ 625.685074][ T26] audit: type=1804 audit(1547720391.491:434): pid=31400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1169/file0/file0" dev="overlay" ino=104838 res=1 [ 625.688283][T31396] should_failslab+0x9/0x14 [ 625.688304][T31396] kmem_cache_alloc_trace+0x2d1/0x760 [ 625.723653][T31396] __memcg_init_list_lru_node+0xef/0x2e0 [ 625.729300][T31396] ? kvfree_rcu+0x20/0x20 [ 625.733633][T31396] ? __kmalloc_node+0x4e/0x70 [ 625.738323][T31396] __list_lru_init+0x4d9/0x850 [ 625.740049][ T26] audit: type=1804 audit(1547720391.491:435): pid=31402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1169/file0/file0" dev="overlay" ino=104838 res=1 [ 625.743090][T31396] ? list_lru_destroy+0x520/0x520 [ 625.743109][T31396] ? down_read+0x120/0x120 [ 625.743126][T31396] ? init_wait_entry+0x1c0/0x1c0 [ 625.743158][T31396] alloc_super+0x8f2/0xa10 [ 625.787025][T31396] ? destroy_unused_super.part.0+0x110/0x110 [ 625.793037][T31396] sget_userns+0x164/0x6c0 [ 625.797464][T31396] ? get_anon_bdev+0xc0/0xc0 [ 625.802064][T31396] ? vfs_get_super+0x260/0x260 [ 625.806831][T31396] ? security_capable+0x9b/0xd0 [ 625.811706][T31396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 625.817953][T31396] ? ns_capable_common+0x93/0x100 [ 625.822992][T31396] ? get_anon_bdev+0xc0/0xc0 [ 625.827589][T31396] sget+0x10c/0x150 [ 625.831810][T31396] ? ovl_show_options+0x550/0x550 [ 625.836839][T31396] mount_nodev+0x31/0x110 [ 625.841173][T31396] ovl_mount+0x2d/0x40 [ 625.845245][T31396] ? ovl_own_xattr_set+0x10/0x10 [ 625.850183][T31396] legacy_get_tree+0xf2/0x200 [ 625.854861][T31396] vfs_get_tree+0x123/0x450 [ 625.859373][T31396] do_mount+0x1622/0x2fa0 [ 625.863719][T31396] ? copy_mount_string+0x40/0x40 [ 625.868671][T31396] ? kmem_cache_alloc_trace+0x354/0x760 [ 625.874222][T31396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 625.880473][T31396] ? _copy_from_user+0xdd/0x150 [ 625.885339][T31396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 625.891587][T31396] ? copy_mount_options+0x30e/0x440 [ 625.896794][T31396] ksys_mount+0xdb/0x150 [ 625.901044][T31396] __x64_sys_mount+0xbe/0x150 [ 625.905725][T31396] do_syscall_64+0x1a3/0x800 [ 625.910328][T31396] ? syscall_return_slowpath+0x5f0/0x5f0 [ 625.915968][T31396] ? prepare_exit_to_usermode+0x232/0x3b0 [ 625.921699][T31396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 625.927261][T31396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 625.933161][T31396] RIP: 0033:0x458099 10:19:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") sendto$inet(r0, &(0x7f00000001c0)="471d7341ff66d62a8c5cc3cf9ea2ace6f6b31bf2eba75ab47a40c184ad5596040fb4585bb905252ab16562b2f890d7b27b1de0842a209b26679f0d4babe0851c0d89319ca93da234b9b8bd18b6b89003fb74bcf8c1819cfabeea34d816ce5a19e6f4c09e2ccca1196070059e237e0ecdafdd03a4ab1e6435540659e2a31abf3e9adddf747d2df5c4704fca05dbd1b64f17fcb3", 0x93, 0x800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 10:19:51 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x100000001, 0x5, 0x4, 0x3d}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001200)='/dev/dsp\x00', 0x4000, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x1000, &(0x7f00000000c0)=0x2) write$UHID_INPUT(r2, &(0x7f0000000100)={0x8, "97386168a2c6f47a8a242c10cb481b12b1d99a2ddc2740ca2338e522b978b330583739be5e93ec8dcb2ed09935ca76d71d4956549ec83a52903aa6cb9887f8403bb2daf403f14f2bf6e0ea0ee918d57ee19c3731120a741b184946b57efe95c8aac08bb6e109ea28a34bc7ce47862d153d3b53a12edcc3bc7092d274eff54b15b876869040f28e7ade0fde3b6f0f463bcf505534ccc82daa1a2ded057ffa974a9fbff558e6b45dc00197530ac1ceba166b38f25160baeb11f9494fecb2561b5b203872fecf63a17755a001729aff4241e787f6982588b1dcde3058374aa835a249be0016589ed3139a546c02c2c5b3c4b67ef1b043fd53aa1e0dfe7a62907cee718ce8f0bcec16a555b01ca79493a3c67d646b43839faa95830397bd4658b74b8d868a610356b2d43c1e9ec2f82d8977dd21379fc9701dff7231042510ca690142266d0592da0d7040f0a43772b88fcb407eb4a75aedee77d0096e850d23668994ad1c3e3a7cbc7a53c159c00c184f07e4ba46cdd26e8e8dc8cee4ee1ee91646ade7ece8a78552a2f2be6e72b6a2fb59d98fb50ffc07e8ae66b469e35ed29b3ec979f23fad1244f5b5321afd1f80e951f2f2bebdd4fb362dd2f6611318ba2db562d49698d53cf5ccd05c04986dbf8691740bed74a5af53d6cf4de6a79318bac94b453a43bdadfaffcd448505bfb25a063263ff227b34052a0b36c2c1edfd036cf60f1fd101b628b4b44de1263e5182d362d2b80cfe4ed7b62b3ed760d155853de22e290ae772b94d9d1f20bb0fb1655f7e781e62d8bad57c5ed3be21b3d911c12efc8c725bf276b812e23901f93b17dfed532ef452a21a8466be61173719b92603a2e7566d4e68789bfd1939ce293518622edbf8657a47e0b338e31239c049a73f1d79a460befc59bb986719b895c03390033c8bb0e1d7e2dd988a06faafe3370cb484b9004c33df8e50c253fb34507dda01aa0449222e5c3ffce898fbb54894127ea8a0c7bf24da7899c5a99a45d06af0b676c57498f9655ea3d1f48db9d53f08fb9b2d67332a32e5ad8955b6da548919a17a060ceb57152dbb49050057fdf9c527bbe6d7d8f406c25e41838fa7146fa5e860808bedc821fd0439947c59ada20bd4d088709fc52c572cb1726014976cc4d9c74e92984f977ef5576b634453af1d7f8f7601abcd70d0cad680e7679ec83f20accf70ae9c94c5115c9c927629896bd643eae1694770358365f5aadadf368b6ee56af617e3eb7c33ba5f928575c29eed8fde4e174f83ff51fbdc3fc33827c876bd43157ebd6f8bc0be78e32296035afd09ce66be5218d381d0fcbf8a7a24b6c15bdea6eec304e8fcd6d07662bde42af73fe481069d811d98bdf5b14abc2c4f594c7a0e554ceca85d87e492b08c7d51dd9f1e4bc73beb24cd1587978912afcebd0b98354fe190e64f91e72852191e030be1281950e00d4847b86985eaa9f0eb83e590e10e05c6fd2472593ebc5d77433c8135bc81ba987e029ca75403eb22aef8487637c475947a3dd4458a1adde3b2fe1d84fc8d971ddb04fa171ebe4a86121da20aaa06d6d8a7938cc37eead494d75ff1ae86986351e2a7389aed14498b5b24e34238b92072ae0de3374b3017c265b479ccddaf65800b9deeca11f7e4f43bbc4f68982394ae57bd72aeb55184672355e918358c36d051c4c2b7b3fb01845688f25b708143b9d63498071578b07dc69d17c82d0e675f010236a4f9ab7a1f1306efa55fc8e750ba01abf6b5faf2fb49c8fead390baf08841076407953e41c818d6950ff23a91884aed310367ac01f6352760ce5682e6fe0a9a28d1b78cff41fad102b4b47ad1f0930e0b41ecd7ebc6f9423ad5006e87e60c2cd0c9e0e274d2dba02f5cdb5e7193b4ff72a602943f41e4a26afa961f65b4204938b1fdfa4f7852c05296f53a3c4d82509fb6e1cb70faece0379e29f0d9937e8171b6b9259797d37df7d9c4eb961551c3bb5f49bb755602cac54e1fee6779f607f444ce39ddc9b2c030c642c47e4766208510e65a70273ca325013659464792d3e59155419c487d02559c6d121fce1ae61542ddd856c5b9a73d4c5b7f2783c3c2943e2f5af3cecab080de010fae392bc62c82a6f6e180da2e43ebcaf4ce6a2b5ddeab9ee21ba72060b132bf67a3ac843895a6210563e198a5bcf0e523b7c9a54ab929ab09e77e0be311dfaa96c176cb77918efd85dfaeb5f929132e8c8cab8c62691ffdbf9ce15bb0f32029cf291dbe7a660bc2a8c782acdd84dbc09a10ce651d78eb373d812b229e25bff8af2ddaad3ebbbdd39fea70366551e7a5061eb0c918f8ee5180ca393935fe587e8660abda94255d8c80a9db6fe6c9cfe56e63863f2c48fb8e0be654ea8a2e318579260b573a50a5e2ac64fdab8b0ff99fc4a22e87179271059ebba1f16d4dd57ea3e3bf705f1bc44e9e8f023787eabf2292304a419494f687768e1903eddac8de52aa18620737574fab714f06578e5bd46910680808673c00e63a9d45c0a7c62505da3a31463933b3e5545105b1f40a061c7ccff8bfa3d566494adc60ce6cc51510c11b0335bc00b4b2e6414f8875e2c62086d19a35b73c46af87000db04f25a193982cb63bddb8bf1d743961369483db1a577a2522820b3a1470d06941dd870662125bbb9620d0874933b642935c8c32efad3864d610734ad2d1e541391a065276f6a1cec45ad5b64d47c38b740afeb7067c6cc8bb6e164ff153857b8f43a52e66f22885a1c24b9fcd4dcaf74584c450fb2d56449fec5ea02214c7ce0e220533dc12248f16ce843c8699988228fb77c648375240f215c4f9d63652803f61bf9ac8a7921dfce3eea20ccc90d3d93beaa735dc9010564bf5811d65341f471dd12042b086989d294d86711d77407ad1ee2f6b5d7d1e26e79e75503dd1635b5e512c25ea87a60df271adbd0ef483ae0ac8443ca484dda773eb5bb871a101c05676f27459b2a7c6b86e332820513e519c1a1a6ffdb38a94d77caadac494aa227943fb8eb6ebb2bad8b3009df619862632c2aace3bc79664cfcbea7eb73f9964730713045668a006550df92a8187de7a4c3882ef22731427d44895532e93848e9434cde0243ae73eb730cf07840052f05b143f3f255745fe9cf98920e870692d057d737ec5ca95004dcfee8a924b2d1fe5c70b428cdb3d7805101506bfc2de80817a0e26e411f6664fa24593a1a64959ff471e0e4ee6be56f871ea8861b71b020ac153dd3123da60fc3ea1f60b10bf2f30bda5c271379e3b0e2eec32130ed49e504092031adddc29eb263d045275595e1a70f36c602c2c4af489f83bd612e25e66d91aee45069c150eb396dd0787f8902c3ae012dc61cb0ef2c9446dc57621e617b12ff4aa3f09b3c89b51ff3bca569e3c8f50784ebf9b56903efc5b7a66d7e2eb47d36be94efd5275848ec0cff6c80f57392799e5f09e6732abbd802a9f382d9ffddc2b0bd8bee1e09356098c8fda19127f4f156a495d6949f1453fe7fd4230876176519ad0fd66cf2442bcd73b03c5a9485d10a73a90a57398a2b06fe3844726383e01f44baf985dcb5d5cca4b36d97f38708a93bccd548c9fa3a9191d258cff1dbe1026c49880a2983f3853690cafc66bbc812385c3c6bf9c60b6bdd91ee1246489b7f6f05e5cbf3ab575daa537d0062688c9655bcfe1eee4fc7366e2a4cb0db549ab0e8e191029a686b4ccb9ec2e391e1ef78e556ce81a8fc0fc0116cf16615c7d9099750ef45c894a61e505f0f3d4371c7d71b855e1524deb9fc09f25b4ff68a54afff4bd8dd84dfc0b5ffe04e2ab2f8487f0b6f6614dd13cf061d1c71e8649bd815c8db756c565c3dde168e0c437ba5dc9de967d965e8b7e2aae36b2435d0dfe05f11d04261c5a8f3b596e1384f3223fb2193135bd22a992f9fc709f76cccc4cb3895730f5b37cb324383e6dd08fa9176085086383e0f31e7bf05ec9db1e3d1894b57afb84854ba727b97c1d80913e5cd3677cb3258a2bb917a8bc86021d49ea725bc8960186ae170301eaf8f4b83fb706933478637cd4417538a925b94a144d7cdb6bc21f943478ae19a03ca4122bb38881ccd51192042ee87be7bbf6ef9ceb502b68c65916bc85dc1cc0460fd4072eeed827a01d2338bb5d60c9944134664a375b4dd241178f424e0529ed4035e2d515672c3fa217c089c21e424c7bcbc61dc99e9cdbf514d4ae34886a61f349765c99f3178caa2019d38954034f088557bef808e84a3621b07aa9e4f4c4eed2bd763cb59c63946518a6099231510edcd69e18f11693bb41a17a62f0b48fe6bff45622a427ce6391610cedc3706bfdce5bd4234933fa441746fcab0bda67dc4a5d5272de02d43575da8b8f250bac94f2179fe7b464d38249ccd88052ac823f5a7a5a91acfc6e09aa295e76e696221f3cf631bb5232ccc62eca211bb07f72a4f1caaed129a8c05eaf37dd91cb3f3d2bb1c03bea5d2a4d77a9d14c8241788782629c1e1ed5ef2f85f5777333a52ba16a745dcf15ef36746f57d8ae8602a899aa67cd2fbf931b3fc12613f2a930b9e4eaf57f8dd393804c6948ae85467bfa608589dacdac2efb74e684e5d0af5b5780c34fc716e60f021bd9336a7bb89f4507133f91d520a06ec9ac841d404b391aa9c45777f87631632a4bd2511405f7a713fc3e515e9edfe777d18c7ea1dc34c7d316206d85b2a06b8e83d9654eee46a44493b81c25a2b9b6ca48cf85619ad1be2dc4ea3863539fe238f0900505e4fd38809fc721c9b928fa12063becc6c500e2234efba72de3f8dde221865d5d96b54466b1c85456b6c3c5b6adb93d46216a8a4a80e20a5f544c252d459a566f971de8cfce6a1ea3a357104fc79352f8e54ed78aa4cc4d1e69d76bf0a6241c7a851eae2069aa3b64524a5799e133994dd72f3851e3ceb54a0b1b553ac3f5aeb21c596d5df706b8f81f906891ee7d7786f13e37f14022752ae904f5548ba30ab1ed6f915754da7ea5ef1daf1f3f01eec7ec8223864b7989d9206e82afe12bc66b5565165aefa72c8d5fa27115320c5c1322484412dfc24c2afd2babdc8ca62ab33a4696bb2c9c8cf788da3d15ae9dacfe92f185acc9fb67142e8b03fcfc094a3f469fa6acf082607528eff3769e09360e98164e476d76653acacfbca563b7a64fb77990d8d34351c9d20bb7418382834b11172142250d9c879ffabe09ddf4b5e851fbd26684ee348d3d57206aa32025d58492ba8db1e60a0658083a9299846be34b81c116d51f26eecb5645759adf8283611b40bd6d5fdbe6c695171db8bb54a4fe56a1dd53ae6d9673b3dba3da0bd3308d4b86990fb742935539ede04bbfba09d879c5ba53ec4093f0c8247b4a03163e6719110bdbb299848525820e6717b074ca852bcdfe08a9396c4bae53c5f52e7f9c0f5a01405f34f020dfeeda6dd091a29f2ca8c9acaa8ff849e89092616276da1e91c76a0ae3a372f68ae616490919658dd7f8a8ec6bd097c49d54a0711959957861496af4688ae6b69c0a3f58ef1d3bf64f2a4a75ced4f40ab2378e21d26982848f4cb70930d9147a4d8a3b1af8c17181c55bc50a41334f3146b506d9635650ca1019a740cd51981d1f9010faa8260ad2cd235a44d3bfb32f422a30de764b30f42da510127c4d0ad7a948670bf82d2948b571f275b1a692aa8c4bc4d6f601860f889132bf5e0db1e298e1214e207b6a4e660b54f32e5ae5fa6589a5739ea89f48b0046a86a0faba7b6cc8daaf568d9b5d05497aa60726fbdedcbf7331f05597a3f2e70f8ca342b444c176624964b73ac8f95", 0x1000}, 0x1006) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000011c0)) 10:19:51 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x20, @tick=0xf4a3, 0x7, {0xd7d, 0x2}, 0x5, 0x0, 0x5}) 10:19:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000), 0x1) 10:19:51 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000100)={0x3, @bcast, r2}) 10:19:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x100) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000080)={0xc10}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x2, 0x9, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffce6, 0xfa00, {0x0, 0x0, 0x106}}, 0xfffffffffffffdc8) accept4$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2710, @reserved}, 0x10, 0x80800) 10:19:51 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@xdp={0x2c, 0x2, r1, 0xd}, {&(0x7f0000000240)=""/241, 0xf1}, &(0x7f0000000140), 0x5}, 0xa0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x1f3) [ 625.937059][T31396] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 625.956669][T31396] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 625.965089][T31396] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 625.973070][T31396] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 625.981046][T31396] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 625.989018][T31396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 625.997507][T31396] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 626.009631][T31433] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 626.036257][T31409] overlayfs: './file0' not a directory [ 626.070792][ T26] audit: type=1804 audit(1547720391.951:436): pid=31404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1029/file0/file0" dev="overlay" ino=105776 res=1 10:19:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xa0200, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) accept$alg(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x4, @time={0x77359400}, 0x375, {0xfffffffffffffffe, 0x1}, 0x200, 0x2, 0x5}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x4c, @empty, 0xffff}, 0x1c) ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=0x0) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x5, {{0xff, 0x3, 0x1, r3}}}, 0x28) 10:19:52 executing program 5 (fault-call:1 fault-nth:44): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:52 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2a00, 0xd1) 10:19:52 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x2000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 626.117586][T31436] overlayfs: failed to resolve './file1': -2 [ 626.152272][T31439] FAULT_INJECTION: forcing a failure. [ 626.152272][T31439] name failslab, interval 1, probability 0, space 0, times 0 [ 626.158181][ T26] audit: type=1804 audit(1547720391.951:437): pid=31404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1029/file0/file0" dev="overlay" ino=105776 res=1 [ 626.192722][T31449] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 626.196665][T31445] overlayfs: './file0' not a directory [ 626.214459][T31439] CPU: 1 PID: 31439 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 626.223502][T31439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.233556][T31439] Call Trace: [ 626.236854][T31439] dump_stack+0x1db/0x2d0 [ 626.241215][T31439] ? dump_stack_print_info.cold+0x20/0x20 [ 626.246951][T31439] ? __lock_is_held+0xb6/0x140 [ 626.251725][T31439] should_fail.cold+0xa/0x14 [ 626.256323][T31439] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 626.257444][ T26] audit: type=1804 audit(1547720392.091:438): pid=31436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1170/file0/file0" dev="sda1" ino=16594 res=1 [ 626.262137][T31439] ? ___might_sleep+0x1e7/0x310 [ 626.262156][T31439] ? arch_local_save_flags+0x50/0x50 [ 626.262171][T31439] ? __memcg_init_list_lru_node+0xef/0x2e0 [ 626.262194][T31439] __should_failslab+0x121/0x190 [ 626.288361][ T26] audit: type=1804 audit(1547720392.091:439): pid=31436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1170/file0/file0" dev="sda1" ino=16594 res=1 [ 626.292184][T31439] should_failslab+0x9/0x14 [ 626.292205][T31439] kmem_cache_alloc_node_trace+0x270/0x720 [ 626.292221][T31439] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 626.292238][T31439] ? __memcg_init_list_lru_node+0x198/0x2e0 [ 626.354853][T31439] __kmalloc_node+0x3d/0x70 [ 626.359385][T31439] kvmalloc_node+0x68/0x100 [ 626.363896][T31439] __list_lru_init+0x5d5/0x850 [ 626.368671][T31439] ? list_lru_destroy+0x520/0x520 [ 626.373703][T31439] ? down_read+0x120/0x120 [ 626.378132][T31439] ? init_wait_entry+0x1c0/0x1c0 [ 626.383089][T31439] alloc_super+0x8f2/0xa10 [ 626.387517][T31439] ? destroy_unused_super.part.0+0x110/0x110 [ 626.393524][T31439] sget_userns+0x164/0x6c0 [ 626.397945][T31439] ? get_anon_bdev+0xc0/0xc0 [ 626.402541][T31439] ? vfs_get_super+0x260/0x260 [ 626.407304][T31439] ? security_capable+0x9b/0xd0 [ 626.412159][T31439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 626.418404][T31439] ? ns_capable_common+0x93/0x100 [ 626.423432][T31439] ? get_anon_bdev+0xc0/0xc0 [ 626.428030][T31439] sget+0x10c/0x150 [ 626.431844][T31439] ? ovl_show_options+0x550/0x550 [ 626.436960][T31439] mount_nodev+0x31/0x110 [ 626.441289][T31439] ovl_mount+0x2d/0x40 [ 626.445353][T31439] ? ovl_own_xattr_set+0x10/0x10 [ 626.450303][T31439] legacy_get_tree+0xf2/0x200 [ 626.454992][T31439] vfs_get_tree+0x123/0x450 [ 626.459512][T31439] do_mount+0x1622/0x2fa0 [ 626.463855][T31439] ? copy_mount_string+0x40/0x40 [ 626.468798][T31439] ? kmem_cache_alloc_trace+0x354/0x760 [ 626.474204][T31466] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 626.474362][T31439] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 626.488812][T31439] ? _copy_from_user+0xdd/0x150 [ 626.493671][T31439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 10:19:52 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getitimer(0x3, &(0x7f0000000180)) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0) accept4$inet6(r3, 0x0, &(0x7f0000000080), 0xf1267cb3ee696e6) ioctl$void(r3, 0xc0045878) 10:19:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7, &(0x7f0000000040)="70f1f9ff06747260ab5d3094ae7d6a605906f0fa28e4797c5a224da5fe950373c7212a1eb0b4c069f0989c9f3087fcdadb75d7e81256dc47d4d6675d26e4b290f7a9d16a58bc98423c9f778ddc9891a37346c4b1b82ec1f7677f02000000a59fef482ab4183a9b7a97ac3dad78f532488da7fa2683") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) 10:19:52 executing program 0: rt_sigreturn() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}]}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) 10:19:52 executing program 0: setitimer(0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x7530}}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) listen(r0, 0x4) close(r0) 10:19:52 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getcwd(&(0x7f0000000040)=""/227, 0xe3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:52 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 626.499915][T31439] ? copy_mount_options+0x30e/0x440 [ 626.505124][T31439] ksys_mount+0xdb/0x150 [ 626.509380][T31439] __x64_sys_mount+0xbe/0x150 [ 626.514070][T31439] do_syscall_64+0x1a3/0x800 [ 626.518752][T31439] ? syscall_return_slowpath+0x5f0/0x5f0 [ 626.524512][T31439] ? prepare_exit_to_usermode+0x232/0x3b0 [ 626.530244][T31439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 626.535787][T31439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 626.541680][T31439] RIP: 0033:0x458099 [ 626.545554][T31439] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 626.565137][T31439] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 626.573544][T31439] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 626.581504][T31439] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 626.589462][T31439] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:19:52 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200000, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:52 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) 10:19:52 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x4000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 626.597424][T31439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 626.605389][T31439] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:52 executing program 5 (fault-call:1 fault-nth:45): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 626.663651][T31461] overlayfs: './file0' not a directory [ 626.673888][T31473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 626.684801][ T26] audit: type=1804 audit(1547720392.561:440): pid=31455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1030/file0/file0" dev="overlay" ino=105890 res=1 10:19:52 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x2d00, 0xd1) 10:19:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x480, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x4, 0x1, 0x3, 0xd21, 0x10001, 0x6, 0x4}) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 626.733970][T31479] FAULT_INJECTION: forcing a failure. [ 626.733970][T31479] name failslab, interval 1, probability 0, space 0, times 0 10:19:52 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x5000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 626.770905][ T26] audit: type=1804 audit(1547720392.561:441): pid=31455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1030/file0/file0" dev="overlay" ino=105890 res=1 [ 626.782519][T31483] overlayfs: './file0' not a directory 10:19:52 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in6=@mcast2, 0x4e23, 0x4, 0x4e21, 0x2, 0x2, 0x80, 0xa0, 0x7f, 0x0, r1}, {0x8, 0x9, 0x6, 0x4759, 0x4, 0x2, 0x6312, 0x8}, {0x2216, 0x4a9e, 0x0, 0x6}, 0xfff, 0x0, 0x3, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d4, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3500, 0x2, 0x3, 0x0, 0x7fffffff, 0x0, 0x81}}, 0xe8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002bbd385111d36bbdfbc58be02927c4a333796e983fc8e5edf92a0263ecc09c231c6fa9ab592a5fb12256db69bb7000fedbdf2500000000100004000c00010073797aad2e5efc47c96e65e966ebcd0e643000000000"], 0x24}}, 0x4040) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") connect$vsock_stream(r0, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$sock_TIOCOUTQ(r2, 0x541b, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') 10:19:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xfffffffffffffffe, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="a1b824a06d39f79a02a8f45db159aa50", 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$lock(r1, 0x27, &(0x7f0000000080)={0x1, 0x3, 0x1, 0x20, r2}) [ 626.825220][T31479] CPU: 1 PID: 31479 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 626.834281][T31479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.844341][T31479] Call Trace: [ 626.847659][T31479] dump_stack+0x1db/0x2d0 [ 626.852003][T31479] ? dump_stack_print_info.cold+0x20/0x20 [ 626.857739][T31479] ? __lock_is_held+0xb6/0x140 [ 626.862519][T31479] should_fail.cold+0xa/0x14 [ 626.867119][T31479] ? fault_create_debugfs_attr+0x1e0/0x1e0 10:19:52 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x400080000000, 0x101000) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'vcan0\x00'}) 10:19:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x6040, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @multicast1}, 0x24a, 0x0, 0x0, 0x0, 0x2, 0x0, 0x100, 0x800, 0x40}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x4, 0x5, 0x40, &(0x7f0000ffd000/0x2000)=nil, 0x8001}) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x5e, @local, 0x4e22, 0x4, 'wrr\x00', 0x4, 0x7fff, 0x39}, 0x2c) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) [ 626.873024][T31479] ? ___might_sleep+0x1e7/0x310 [ 626.877891][T31479] ? arch_local_save_flags+0x50/0x50 [ 626.883179][T31479] ? __memcg_init_list_lru_node+0xef/0x2e0 [ 626.888995][T31479] __should_failslab+0x121/0x190 [ 626.893965][T31479] should_failslab+0x9/0x14 [ 626.898478][T31479] kmem_cache_alloc_node_trace+0x270/0x720 [ 626.904296][T31479] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 626.910139][T31479] ? __memcg_init_list_lru_node+0x198/0x2e0 [ 626.916052][T31479] __kmalloc_node+0x3d/0x70 [ 626.920561][T31479] kvmalloc_node+0x68/0x100 10:19:52 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r6 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getgroups(0x8, &(0x7f00000003c0)=[r2, r3, r4, r5, r6, r7, r8, r9]) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) semget$private(0x0, 0x0, 0x400) [ 626.925086][T31479] __list_lru_init+0x5d5/0x850 [ 626.929854][T31479] ? list_lru_destroy+0x520/0x520 [ 626.934885][T31479] ? down_read+0x120/0x120 [ 626.939308][T31479] ? init_wait_entry+0x1c0/0x1c0 [ 626.944263][T31479] alloc_super+0x8f2/0xa10 [ 626.948694][T31479] ? destroy_unused_super.part.0+0x110/0x110 [ 626.954697][T31479] sget_userns+0x164/0x6c0 [ 626.959122][T31479] ? get_anon_bdev+0xc0/0xc0 [ 626.963715][T31479] ? vfs_get_super+0x260/0x260 [ 626.968481][T31479] ? security_capable+0x9b/0xd0 [ 626.973437][T31479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 626.979680][T31479] ? ns_capable_common+0x93/0x100 [ 626.984825][T31479] ? get_anon_bdev+0xc0/0xc0 [ 626.989421][T31479] sget+0x10c/0x150 [ 626.993241][T31479] ? ovl_show_options+0x550/0x550 [ 626.998276][T31479] mount_nodev+0x31/0x110 [ 627.002609][T31479] ovl_mount+0x2d/0x40 [ 627.006680][T31479] ? ovl_own_xattr_set+0x10/0x10 [ 627.011637][T31479] legacy_get_tree+0xf2/0x200 [ 627.016344][T31479] vfs_get_tree+0x123/0x450 [ 627.020857][T31479] do_mount+0x1622/0x2fa0 [ 627.025192][T31479] ? calibrate_delay.cold+0x47b/0x539 [ 627.030582][T31479] ? copy_mount_string+0x40/0x40 [ 627.035529][T31479] ? retint_kernel+0x2d/0x2d [ 627.040142][T31479] ? copy_mount_options+0x242/0x440 [ 627.045345][T31479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 627.046544][T31504] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 627.051591][T31479] ? copy_mount_options+0x30e/0x440 [ 627.051614][T31479] ksys_mount+0xdb/0x150 [ 627.051635][T31479] __x64_sys_mount+0xbe/0x150 10:19:52 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdir=.\rfile0,lowerdir=./file0,workdir:=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0xa, 0x7, 0x7ff}) write$binfmt_aout(r1, 0x0, 0x0) 10:19:52 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x44000, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x5, 0x20}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x3ff, 0x20480) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffffe, [], &(0x7f0000000000)=0x5}) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=""/253, 0xfd) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:52 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xbd21, &(0x7f0000000100)="0adc1f023c123f3188a070") getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 627.073941][T31479] do_syscall_64+0x1a3/0x800 [ 627.078537][T31479] ? syscall_return_slowpath+0x5f0/0x5f0 [ 627.084181][T31479] ? prepare_exit_to_usermode+0x232/0x3b0 [ 627.089908][T31479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 627.095470][T31479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.101362][T31479] RIP: 0033:0x458099 [ 627.105258][T31479] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 627.124864][T31479] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 627.133278][T31479] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 627.141250][T31479] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 627.149250][T31479] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 627.157215][T31479] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 627.165182][T31479] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:53 executing program 5 (fault-call:1 fault-nth:46): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 627.210083][T31505] overlayfs: './file0' not a directory 10:19:53 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x3000, 0xd1) 10:19:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x6000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x400000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r1, 0x541b, 0x0) [ 627.261918][T31515] overlayfs: unrecognized mount option "workdir:=./file1\" or missing value [ 627.286340][T31519] FAULT_INJECTION: forcing a failure. [ 627.286340][T31519] name failslab, interval 1, probability 0, space 0, times 0 [ 627.301755][T31523] overlayfs: unrecognized mount option "workdir:=./file1\" or missing value [ 627.310197][T31524] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 627.344508][T31519] CPU: 1 PID: 31519 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 10:19:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x3, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000080)="affa4f6fcda6e2", &(0x7f00000000c0)=""/28}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:53 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) [ 627.353575][T31519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.363631][T31519] Call Trace: [ 627.366949][T31519] dump_stack+0x1db/0x2d0 [ 627.371292][T31519] ? dump_stack_print_info.cold+0x20/0x20 [ 627.377041][T31519] should_fail.cold+0xa/0x14 [ 627.381646][T31519] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 627.387462][T31519] ? ___might_sleep+0x1e7/0x310 [ 627.392318][T31519] ? arch_local_save_flags+0x50/0x50 [ 627.397609][T31519] ? check_preemption_disabled+0x48/0x290 [ 627.403343][T31519] __should_failslab+0x121/0x190 [ 627.408344][T31519] should_failslab+0x9/0x14 10:19:53 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000240)={r2, 0x3}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x4c6b4a3e6f694b7a) getpeername$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000140)={@local, r5}, 0x14) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000080)={0x3, 0xfffffffffffffffb}) ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0) close(r0) [ 627.412890][T31519] kmem_cache_alloc_trace+0x2d1/0x760 [ 627.418268][T31519] ? rcu_read_lock_sched_held+0x110/0x130 [ 627.424010][T31519] __memcg_init_list_lru_node+0xef/0x2e0 [ 627.429648][T31519] ? kvfree_rcu+0x20/0x20 [ 627.433984][T31519] ? kasan_kmalloc+0x9/0x10 [ 627.438499][T31519] ? __kmalloc_node+0x4e/0x70 [ 627.440292][T31528] overlayfs: failed to resolve './file1': -2 [ 627.443188][T31519] __list_lru_init+0x4d9/0x850 [ 627.453908][T31519] ? list_lru_destroy+0x520/0x520 10:19:53 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x1200, 0xd1) [ 627.458942][T31519] ? down_read+0x120/0x120 [ 627.463363][T31519] ? init_wait_entry+0x1c0/0x1c0 [ 627.468312][T31519] alloc_super+0x8f2/0xa10 [ 627.472735][T31519] ? destroy_unused_super.part.0+0x110/0x110 [ 627.478732][T31519] sget_userns+0x164/0x6c0 [ 627.483153][T31519] ? get_anon_bdev+0xc0/0xc0 [ 627.487750][T31519] ? vfs_get_super+0x260/0x260 [ 627.492513][T31519] ? security_capable+0x9b/0xd0 [ 627.497375][T31519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 627.503616][T31519] ? ns_capable_common+0x93/0x100 [ 627.508649][T31519] ? get_anon_bdev+0xc0/0xc0 [ 627.513249][T31519] sget+0x10c/0x150 [ 627.517061][T31519] ? ovl_show_options+0x550/0x550 [ 627.522097][T31519] mount_nodev+0x31/0x110 [ 627.526429][T31519] ovl_mount+0x2d/0x40 [ 627.530491][T31519] ? ovl_own_xattr_set+0x10/0x10 [ 627.535417][T31519] legacy_get_tree+0xf2/0x200 [ 627.540087][T31519] vfs_get_tree+0x123/0x450 [ 627.544599][T31519] do_mount+0x1622/0x2fa0 [ 627.549044][T31519] ? copy_mount_string+0x40/0x40 [ 627.553968][T31519] ? kmem_cache_alloc_trace+0x354/0x760 [ 627.559503][T31519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 627.565738][T31519] ? _copy_from_user+0xdd/0x150 [ 627.570587][T31519] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 627.576843][T31519] ? copy_mount_options+0x30e/0x440 [ 627.582029][T31519] ksys_mount+0xdb/0x150 [ 627.586256][T31519] __x64_sys_mount+0xbe/0x150 [ 627.590916][T31519] do_syscall_64+0x1a3/0x800 [ 627.595488][T31519] ? syscall_return_slowpath+0x5f0/0x5f0 [ 627.601115][T31519] ? prepare_exit_to_usermode+0x232/0x3b0 [ 627.606822][T31519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 627.612352][T31519] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 627.618234][T31519] RIP: 0033:0x458099 [ 627.622141][T31519] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 627.641722][T31519] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 627.650113][T31519] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:53 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0xfffffffffffffffc, &(0x7f00000000c0)) r0 = open(&(0x7f0000021000)='./file1\x00', 0x0, 0xc) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/101) 10:19:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x7000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 627.658064][T31519] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 627.666015][T31519] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 627.673968][T31519] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 627.681927][T31519] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:53 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0xfffffffffffffff8, 0x0) fchdir(r0) r1 = geteuid() fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@subj_type={'subj_type', 0x3d, 'workdir'}}, {@subj_type={'subj_type', 0x3d, 'workdir'}}, {@dont_appraise='dont_appraise'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x72, 0x65, 0x77, 0x36, 0x38, 0x38, 0x77], 0x2d, [0x32, 0x33, 0x66, 0x62], 0x2d, [0x0, 0x39, 0x7e, 0x61], 0x2d, [0x30, 0x0, 0x32, 0x66], 0x2d, [0x73, 0x7f, 0x65, 0x65, 0x33, 0x38, 0x66, 0x36]}}}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}, {@appraise_type='appraise_type=imasig'}, {@uid_gt={'uid>', r4}}]}}) r5 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r5, 0x0, 0x0) [ 627.718251][T31532] overlayfs: './file0' not a directory [ 627.742298][T31548] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:53 executing program 5 (fault-call:1 fault-nth:47): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:53 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0xc00, 0xd1) 10:19:53 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4000, 0xd1) 10:19:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfffffffffffffffa}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000080)={r2, 0x80}, &(0x7f00000000c0)=0x8) 10:19:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x8000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:53 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file1\x00', 0x8, 0x3, &(0x7f0000000400)=[{&(0x7f0000000240)="ca40465be5eb768b33a357f88f5a17ea4000316d844a699c3c37212313d1bb12b3d7c165c4d623f43faafefa9dd628f11351b65401e488b74446bf06a463c8570e9a62aa117c1660f7ff29231da4cc794699c268aa7cc92b95984d9456a8dc7c8c87f0eaaf0f852dc600e0ce9047fa3ab0c83e71e85cced443ad7ddaeccb9dd88740e363fa309938e04ec4f4f99b18667a759d74fabd5c5615a032f81377290e48c24aad3480fd87b50786", 0xab, 0x3}, {&(0x7f0000000300)="7e3dae11718d2aca3c417d39a7cb9645a6e6a7c6874324e0eff4272c936debc4c1833af1615ff2ec9f71c31dfe8f9faab56df571e3b3e6d5cbbb6248e760899ba8a7f278bdc51fd2711038b292d6ea5dc88054df692f062603c06590b4186c7e20e83c5e99b6cc86b1be027ca38f4277e584b127bdd621fbfdc804df80ff8da087c3ef1e698634a0e11f4e65b55a5fd9c51af33ba60916afcce3a6c0fc4236ce21d6a6e839a08b18940d86598b70f603b810896e79b690a0375f399589fb3782ec58acd2529713a567d091c5efe1f699483ba3c46ba06461b558", 0xda, 0x1f}, {&(0x7f0000000640)="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", 0x1000, 0x478}], 0x40, 0x0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0xc) write$binfmt_aout(r1, 0x0, 0x0) [ 627.829792][T31552] overlayfs: filesystem on './file0' not supported as upperdir [ 627.910018][T31557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 627.922044][T31559] overlayfs: unrecognized mount option "worL =./file1\" or missing value 10:19:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0xffffffe6, 0xfa00, {0x0, 0x0, 0xfffffffffffffffd}}, 0x20) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) [ 627.955002][T31567] FAULT_INJECTION: forcing a failure. [ 627.955002][T31567] name failslab, interval 1, probability 0, space 0, times 0 [ 627.981219][T31568] overlayfs: './file0' not a directory 10:19:53 executing program 0 (fault-call:3 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 628.012628][T31567] CPU: 1 PID: 31567 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 628.020923][T31569] overlayfs: unrecognized mount option "worL =./file1\" or missing value [ 628.021674][T31567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.021681][T31567] Call Trace: [ 628.021702][T31567] dump_stack+0x1db/0x2d0 [ 628.021723][T31567] ? dump_stack_print_info.cold+0x20/0x20 [ 628.053637][T31567] ? __x64_sys_mount+0xbe/0x150 10:19:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) 10:19:53 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x9000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 628.058598][T31567] ? do_syscall_64+0x1a3/0x800 [ 628.063488][T31567] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.069564][T31567] ? print_usage_bug+0xd0/0xd0 [ 628.074341][T31567] should_fail.cold+0xa/0x14 [ 628.078938][T31567] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 628.084799][T31567] ? ___might_sleep+0x1e7/0x310 [ 628.089720][T31567] ? arch_local_save_flags+0x50/0x50 [ 628.095014][T31567] __should_failslab+0x121/0x190 [ 628.099963][T31567] should_failslab+0x9/0x14 [ 628.104477][T31567] kmem_cache_alloc_trace+0x2d1/0x760 [ 628.109867][T31567] __memcg_init_list_lru_node+0xef/0x2e0 [ 628.115506][T31567] ? kvfree_rcu+0x20/0x20 [ 628.116825][T31576] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 628.119838][T31567] ? __kmalloc_node+0x4e/0x70 [ 628.119861][T31567] __list_lru_init+0x4d9/0x850 [ 628.119880][T31567] ? list_lru_destroy+0x520/0x520 [ 628.142538][T31567] ? down_read+0x120/0x120 [ 628.146973][T31567] ? init_wait_entry+0x1c0/0x1c0 [ 628.151948][T31567] alloc_super+0x8f2/0xa10 [ 628.156370][T31567] ? destroy_unused_super.part.0+0x110/0x110 10:19:54 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xa000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x1f, 0x4) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xa4e9dde3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd91}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffc}]}, 0x84}}, 0x4000) splice(r2, 0x0, r5, 0x0, 0x20000000003, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f003c123f3188a070") r7 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 628.162371][T31567] sget_userns+0x164/0x6c0 [ 628.166791][T31567] ? get_anon_bdev+0xc0/0xc0 [ 628.171388][T31567] ? vfs_get_super+0x260/0x260 [ 628.176159][T31567] ? security_capable+0x9b/0xd0 [ 628.181021][T31567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 628.187263][T31567] ? ns_capable_common+0x93/0x100 [ 628.189115][T31581] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 628.192290][T31567] ? get_anon_bdev+0xc0/0xc0 [ 628.192305][T31567] sget+0x10c/0x150 [ 628.192324][T31567] ? ovl_show_options+0x550/0x550 [ 628.213921][T31567] mount_nodev+0x31/0x110 [ 628.218269][T31567] ovl_mount+0x2d/0x40 [ 628.222340][T31567] ? ovl_own_xattr_set+0x10/0x10 [ 628.227285][T31567] legacy_get_tree+0xf2/0x200 [ 628.231980][T31567] vfs_get_tree+0x123/0x450 [ 628.236493][T31567] do_mount+0x1622/0x2fa0 [ 628.240821][T31567] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 628.246275][T31567] ? copy_mount_string+0x40/0x40 [ 628.251199][T31567] ? copy_mount_options+0x1de/0x440 [ 628.256392][T31567] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 628.261948][T31567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 628.268189][T31567] ? copy_mount_options+0x30e/0x440 [ 628.273395][T31567] ksys_mount+0xdb/0x150 [ 628.277643][T31567] __x64_sys_mount+0xbe/0x150 [ 628.282326][T31567] do_syscall_64+0x1a3/0x800 [ 628.287044][T31567] ? syscall_return_slowpath+0x5f0/0x5f0 [ 628.292686][T31567] ? prepare_exit_to_usermode+0x232/0x3b0 [ 628.298414][T31567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 628.303982][T31567] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.309879][T31567] RIP: 0033:0x458099 [ 628.313775][T31567] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 628.333376][T31567] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.341786][T31567] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 628.349767][T31567] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 628.357739][T31567] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 628.365708][T31567] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 628.373679][T31567] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:54 executing program 5 (fault-call:1 fault-nth:48): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:54 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4100, 0xd1) 10:19:54 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xb000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:54 executing program 4: mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f00000000c0)="ff53009f521e301da8312cd51a78f3b6553d81fbba02bfd141abd14bb6d3", 0x1e, 0x5}, {&(0x7f0000000240)="b0e247cee496fca7430b775b99f363244143913172bca6b57581462a181e84cdeb939b5c4d26f4014773ab49e78d3110e19a662b516dd5388a37feb42ab0fce9e2223dd4e5125939035029c28d80430b07cb91839784b928f1fb4ad631d12754529f093458dc16303f81a927c9774fc9b1e2753abc7258661598e0e6d30734dbe25f10edd7c8e7c9f5e956d2a31b4787e9e2d0ec562cd71c78d77e7514f7768020a8aa8a5320f94554ad2bd0f8badcfec7751790a34dc85d7f92be91e1073e0c60e558b2b0e379759e4e625f1d0ced7daffcc65a5c4297d33f48", 0xda, 0xd}], 0x106800, &(0x7f0000000480)={[{@nodiscard='nodiscard'}], [{@uid_eq={'uid', 0x3d, r2}}, {@audit='audit'}, {@dont_measure='dont_measure'}]}) write$binfmt_aout(r1, 0x0, 0x1f3) [ 628.484223][T31591] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 628.505619][T31597] overlayfs: './file0' not a directory 10:19:54 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:54 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75747065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c6530010000006b6469723d2e2f66696c65315c00"]) r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000001a40)='/dev/vcs#\x00', 0x3, 0x80400) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001c00)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000001a80)={@empty, @broadcast, 0x0}, &(0x7f0000001ac0)=0xc) sendmmsg(r0, &(0x7f00000021c0)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x3, {0xa, 0x4e21, 0x5, @mcast1, 0x7}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)="03aa74be9e08ecf066b49c3a024aadb4d019d6bcb634d9c109", 0x19}, {&(0x7f0000000140)="6afe", 0x2}, {&(0x7f0000000240)="c4e5627df118555d2d3b23293d9259b9401bf57a949069d81cece67c6f27ad74c858599da0fa2268352636563bed38931908b2a34ec832813f942371ca7a992026b5c04683b6ab2c033332d671c1c445912c4c4fe0f87e789c57ede49f216951120ee3b8d2513f3215a4c99d7e3f55e98d0095996d16e0791f26648fef40905ab3c7caa4de1912441c3265b551be74c5923b34", 0x93}, {&(0x7f0000000300)="027d64acec85b80e6f7eef4b052c9289d06d2893f80341ebb1e9238caec27c7420c8170662d90e6e758507fa3d6bd4473d3b7308c302cf17119742e3b0725bac0d1ceb99023279e3e199f60162f50dc30bee622aea780728bf32222e41a931a3493d8da89d8275f5f69c5e4be69d519b051376ab778ca1fc19e943c0ce459f2fed3b708774277a6655e7398327fd462514005cd514d877bafede45efadab3ca92e7b444c5675d7e514010a69d16486c402eff497fa3809aa606c275a90a2a593a482f5eafd27bfc8946861d9b43532b0e4d4a5737365bb1e977e48888f", 0xdd}], 0x4, &(0x7f0000000440)=[{0x110, 0x119, 0x5445, "5c0e84a684c6e883e321add17261f1d32a8a37cbc32896a70403b31d92d27fb9e303d4375ebffb7f2cce7b4a1a4938cc32eaaebf5bf71acfe5a93f4a445ad11661a83b962a55b5cdd30f90f9c6cf9de25f12419ef837ab5ee3a42e12578168225c486876198bcd8760cbf33ffe990febf8a2bbd232821811b82a9d4cab8dc57b9922c88e7986eec355a2bd7cf41ec8605c99e23dc121a583c12c7c50dac005393384d7848a955ff5e0ad7b69f225ed4c59d7c2cc98355e5cf66d91bda952048eb5982c10e2177f4ea0238cb62ed7c620063e48cdd92ef602f99dc83d255189d882bafbf1d1be18143bba1982d484575348c69b8900c08cf0e38d68925fd6"}], 0x110}, 0x400}, {{&(0x7f0000000580)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0x2, 0x3}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000640)="5c292cf19e832ae0d400c1b74e24fe28d745f06a847888b4b550b944bd14a0eaac8d9941c0792485bb2a9d60b0a119f3a493b56f31394ae5dbc578533f6f3b712f499e3c7e817328fbc57b1c52a3dc8670383c88f70d4291a67fe9c8d2c4174284ee5c3334a4d71eb0c9e4a753d83d1492bd717794df92f46f2498926ec48f1560f387e35a1de2b12fc220d6631f2cc3e0d893aec059e16a9d8bb401c4961928147abd6471a1435b4384a682a4f6b6b280e620cf77b2a736615933408ea10f00bc57ab54996eda9be5d6d564", 0xcc}, {&(0x7f0000000740)="46d84f844d61d82dff295c0ffe3c0b1f84489328bb93102831fa7d132162f7bf27f553b8c4ddeb85b958baf5822ce2592f5a887353014bc056f24729129b3de5b515e5b830521a5ebd32e3eade02f8354bcc41444c79091e0c7a9ed39d666ae6124c9e61c4ccf745e8ae51d2a16363bfabc5234c99730670a9a5d645a421baba56ba6715d0272c41cf201595", 0x8c}, {&(0x7f0000000800)="ee21e1414e9d3032a36de65b4dbdd762bede1121d1bc467542cf565b28c84c81ea9495fae0cdc0fc56ac803dabf85e61048dae6fde808516f0153447d3d801016bd851a5532cd089e85af08b4f0aa381120e47dcda1afd53de057ce80867af20469072861f53534f3632ccc14e14ee0a0b0225aaa4052b5c3b73d04332ccd1f85b3599ddde3ae58ee91017a9abb021c9c1", 0x91}, {&(0x7f00000008c0)="b42ef9dbdd0160f0800cbf2b35e478", 0xf}, {&(0x7f0000000900)="7fd9dc577771ce303c45642eb4b1dcbc1a9cd4c1177f370ca003d0448cb60ae72fd7ff6f76bb4810e985365fa2224e9072bb0f042564f721fb21", 0x3a}, {&(0x7f0000000940)="6ed6b8a6025a14df08beeb662b5c6f6be4f3e676f554435e52b664f25887167fe758b454510c16cfe1cce385c3b9c666d1abd316b9e759bd9fa00ad1784d6a6cab6391356afbfef9f3bcd86a65758f284b6a12060ae23172f890ea6899d333d74dac5c02f83febdaaf63257cdd87dc108d2e4b3a131a8edad95421cfbbc496fda3100fbed5718fcf61905b40ec34d84ee3fdb433e643a6566553bdd87d1f6bf5ad8dfe230e0d6a35f11a96ecfebc3b0d2c8b9e93c6f8869bccaa6f463bf2d5c8197325d03d3721860673240375deb5ca984ea3ec27103eb0abb15dd24c4521855f06752bf538b998ede39eaa2c4aa99410036cc05cd729cc86ba851b09097ef3cadee1a19aec098239865a19ba482d32f232b3a42bbcb3ced48beacec05bb7f7de38f432374c478a876551a2d70d9cfb3718abcfb30f3ef9bac0cfdbba0f8507aa1e25dc35c561f7913c0675b78a9909cd702f897a52a94fcc941f3c2a113bb374e5dd1977b38708b79db1a522ef8d9aed1ed38944c86001701029b76bfe681d5f2b5e7dde8000ea28962c848d99d6b8ce60568401a4c8ebf82adddd2b81cad32fb1beb18a92c4e3015db21fdd0bcedbd42e1315132341b208c91b9758d70ee161595c277c21e911ebd64ef1594939b1a3337179af43b40a8e6e22454906503beaeca2f22359dcfffebf9f67dd4e6bcb2a6432d1666809fdcabab5970662e387724ae9fba96deed27736db4edc57658ea7f8d7bd7f9b4cfa034645864e9fc0ac5e2cb28d808233249d04c83032ee0f68d49b529106f964c6c1940555721c9953061e4783ce2285fa42cba954111ab1a8553b90e0ec3aebc6efb23827ad95c508df861632e38f32b20eb7fb4b99997c1fa65b5bd36dbb12d9be1b8f0a2c396e75f3a17225955a9742ce5396ed70316539c932411764383da08a3367a4d1f806821b6095c180ff9ebba7d0944252baa9153e41b7c993bb05bc74ecc64bf210e21c8731300c54fffef1162e46f91e34e89c10ac946f420bfcc2660ca509b5f047ddc1b2f246eb3e13169beaaf0f7a225533399e208836caaf4253bc981c8749441959298841dfd19dfa1861a6b4544170101210deaff42f09ba7de77d1740b1207e02ccc915f4a022536d2749bb64036959fa0119d99dbe32dfd5fad6147654746e6e49c648c9c09152aa603e329f1cb1aa5673dfa45af8ef0cb4c7e6b25e900d7c8637dc2acdf6bc244c49ccf36fdac8b73b932a42ef975d063df886bca650915b579a8d9220b4469a3e10bd6717c834a68d9e702634d45452029d2f51fdf6390f57ee0f77ddc630cfdd91a81e2f6b01d3f24be91014294f6a4fc70dbf548d6d1efb1c5a2f7d1ac4bc592591e83b7fabd03a5aba75d4b4006e023fe5b1f7875147c76e2a73ef43f52459929033a38ba8153d1737f3ebb32a0b4078c7db9044f684e5f84faa1bfaadb19f05db7527552418476c3e9b642183a6c434f9fe8b6223d16a6e385bd1dd41f491cbd9d7617a63c3b274467859a9abb0c2906d93c1b43f53469cf43d337abe319f7462b463e11f9fd3a01b2db0d2be5c0c5ff8449482a323f5406e881149ca66428f16c30ac31fb4745ef45cc619f0bf6b92d01a92308626e4ed20abc423bbfb0b0528b9aab5b865f6aa2b948b857b082e44653084b11b3bc5d4213f48bace971dacf2416baf9e8e4be8cffbb1c98c1f8215b955b4f474e15a097ecd9f46db5d224b12a658d0ac147a56efc8ea8ff482d7e92fbe21aaf49e72ad804fcf6cf6cfc2992c56e35dc01b7a09868eac2de38057c036622ba90ec475d3d9b7f28a6ed2dbd5ba1a953a5a34c59dc1e36520b7229e6650cd860a72ab4a7879929b631399d50a2d183373fe337efede7b66cda0a70037d48ec8a8572476a4bb31b66cbf469b729fe7b516e879f266252b07e3bc11ed3891eafda7fb78c85be1fafe4ecdd6bdb2144c860592b634d4ef62b81a03484ec0a757752a4221813d74e9fde86d5ee7b44d341efc8a8128fec7be6af70290f5e21a9f0d1f2427afbdf2f5541dd725686d76044c355c72aea4797c3837c6825f045f50d2782b25c628129cf16deed9694e0929307cacaf75854b6d64fd4d1956a807b9f6ea2c04ae08e9107c302a3393945047875650823ce3d3b42424bef86cf1ea2a4c1c6d180989806455dcfcc01200df65ce2d7d000f5fe3ede141f5be99e8950ea70359555020cc3efd2adc1147304e8c4d31daac0604ed4d479cd215d9babc259f84bbc6a2a872cdbe5cf2f939916a781a70be953cad98a6e5e17700be634d302cab9bcd7141104026b5945c16c8aeb94021c042e507f7461b81f5910bb7b19faeaad7fd246d2fc140f90f9413279708d1d8eef595c7b5cd92a8992fef54470ee95e4fd11d1c3bfa382828a20558977d802dbff8c8caeaa3c71379e38560b20b87ef5951b21d2c8ac5039e081275c76913f12d9f83ba84d9b6e22d596b39689b5ab6a3909c963110901ff8581f7f61b26eae4f22afda9c7595f8395877f8c5d5f9a29215565e231c6ef2bbdca55e3355d9ebabb801d985322de2fc7fd6cb55935a420ed7098d2c8333bd9f1709ac8eeddf5417d3ac40e9b7cef2acb4fa77ee703642cf4d5a8654bdba3d6b95ae06119f82609f35d029371efba1dd49b970f496212834346815658b3153b353d6797de26b86df616a32257661ddd733c2679534c3b2cd0abb5e9a92aa2e1bca9c39cfe413acdd55fb03e8968ee0a10fcce8b65fb029fd649a50f96c3952ee34a18f3cfc25d1d74237434742ddf43916da964294257ba68854aac4e8f194ea379699ac38101aa68e26a280e4a5c94bedc9b9cc3c945612aeddf7a381c12341150db86e8697e438cb8f63549b0792b0ee3b391e6fd193d5fee0a1cff1936c1da1c6eefd110b561541b9d0da5b5434741ae004af05ce041071e0147577a01bbb66cddff5851006f1835d55fa908180d6f5c0106585d80b59c6db965066e8f82540494bbf75c686c40c302e3b78e27836d88798305ebbef79a9bf518d8dfbf762f04998d6c2c39f2944934c0246cd26124c3c6b8824e6c5dc3081377122a03eee1f6310f3e3669e5ed30fa8ace12f7d44f585595e6e69ce7380fe6ed0a7f381d9daa13660d1d06fbe3a1232f7de4eb053ad98eec068a8c09f498448836ef8715050de885083b6e5be8b8f4cf1e06ae626f5ef48385be2e717cbfb5664c1deb45e5e1461c19e14834ba87693c435295b53306a55c757e4e7b655e8ca5e8cc43034b647d2b79e9c918c9ec9ca4497050d50a20278f9850164a8c85ee65ba05ef33d8690a76ec2f6fba4942b65ed2b59cd7527a0367b4f3cb3978e198e658bb07ad9f57422c2d433272e08a1780ce55e21519c380e20b918589c1b6b534baa6b9e55db37baee094966a87a824483bb6ff87739bc9f2c3004d17733d1bfcf36036c3e1bf9cb596879fe9888706aee3f154df2e89752812a2535ebb95a6366661f9a12f2fb96f8e1ce090443a9358dcb48d1ca934b95cc82fa05a3275077bd28320104292715d12bee88210a7ca9bfe54bcfa513b774bd133583ef79ea2adf9b0f86b1c22ebe2d4c08c03d13cee4edf3a17fc42a46cbc172c812e8e5f97000fe881890f4bfa652ec28bc29ee98300d3b81fe460f4d8a67dc1a4219e0488eb3362cef44e73cafb10a9fa7f2ce6adfca0169a9e0073f5de4031909aa818bcfe6af4f9ae382df0ebc1234747f26f26d2a6d1d6068152f9291946809260ea9706a9f527bc3178a361f2b0f2d9955eb46ae9fdedfb835e0e6bfbd0e5ad7898ef8bb23d72b5e4418b1253c36f655d488cc5050b7da61fe2b5f503273d2c4741fc0d0d6383a8d3c3456c747b0e9421be796dc48df5573998b2cf5b4d148b2c39436c289c3abc1142c21579021234a367352bd8a4f444e4095af3ab8f0cbb8a341edcc5f233aee0824ab5823b19457fe22960b0e18537b361b8d2d961a7b403b829e8be0747b5a6561a79c92e1864cfa18f04e4eafdbc628e37f0efaadc805ae361c9e05add24e25979d0d1dc2d9cda92d396e1e1c52e5332f750a93f2b772ee25cfa0a8b5c708f56801fcf98764b120155005100aa2cb4dd8a765a1faeaca68f050faee9d5216b0e7e6312d25f4a7f0d9ee086faca21ec59084bb2190b7f5f83c46e60d931c6649dd4fa9b6b8b2ee03ee7c2315f14c52fe7a930062f0ce846f63ee5700ca90d0d521ee33835aa2da65ed2ba62ff789d7c64a5410e0a04d04ad6f324047e63431aa537a363e1a79c2350717f232813be47db458515c6198571cf64289c1f78d60470bef17b3b68953280e2f2de1ad1623865aa5d57d599d4db26288fd2ba92b4677cd146efc9f1ebfe9710f6ad4b23f0ea5fb2d29969884ae9c71d619814fb304ed3db5abfd82cfd28157f602ead552e5069a55b042a1b252b8d30cd57ea5ce1513f25cc113542fcb40d212c242287af14fc02a73c40b6f4aab90154f8d299a968af42a938e5e24d86398fe8b7bede461633a4ec34b703fd5f07e8d24345ef1895a75418e5ac8828660d706474fb77324a5a6c252c2bf63337ad2d52b72b0d4cf320c37a634d76ff477dd8d5c756033a5ff68b2829b8d80b184d657caf8aabaa162fc6a801f0e39a3eff41ed21f269f6a129013374498f202502dc33bc95de07ffd2eda948852b76de0e84693409c588c8ca65b218b857bfe73e9df06661c3b5257dd22ec86669bb935483fd1dc801cc5d2a3c2c8404452e1532034982e8073543ac653bd4bb9e2bb21ef2f6068c69ef39a9d776d9cc83b73146f23562624c35a09b1f27862d6f9b0754edf1bedd1210431a11ff3db8e946b4ddf5ef336bd82e052f65cbc544b5869629bdf64fe68f0c27a0a0325415663d20f803703384d3b0af900476c85253ee80229ecac41864325b9d080d580123b70ab2f78affd17bf698ca6a2bbd926718349cad7e635147b22a7d971d9a01ea1d8e5c7d77cf9c877e38de699e0a89035718a72dec6779bc98031e6b78b10d70432df36da2b653c8de8486139c9f0f687f6f1cd51d92c15afdffa912e3c8556d726d0ce40465ed16c2ead7adadf7b2d60e1eb9e8f0efeeff3019daced028dd36b4928688886b811b2c6194cd901e3b90688e96b12661a6964f1089218af1fe311feb16378f158f626e5ff8ab52b24251c6381449c05033c484ab5ae8770d1ff24ab13fd4b0ac4191798d245101b93fa4d7edc5c4a33a575cb27db8020f354d8f9f4db38b561b3b26dde0030b500a81029e529058221d88a3242a54eb18a0d3777f6bb0ffe6a510f9b571715919329b0dd7b43bdf2bad877080e29b61a67c748711c145e1a6510d0ab0616d26c0037c5f70570e3535369de29db1edca9e551e76525ef18971224682524f573751254925d650ae67d2ae2d960328f0ab4fb89532a01c8c7f8c48901e5e1eb31376314f54a4e035e2ab6a791776c9660fd766cfcdee4b8426988b9b89155fe072c0d11c7765a3e463aa8ad577cc4572c841e9ad6bc57b5ada6dbc4fae96220e327a101d651f1e7f8f7b98db082b38c5aac40b0a0238f4d614a02213f8f9f27d79b0dd76db959f452cf288be0deea3c940e505fe5dba19f11f578b318c906ee2e3e6bad36931ae40a991e2751a6087b779d51c9e3833d544d5ba8469ce53cf398c6146106e8ed459a2aec3c7214ccf937096d22be1b2a5ba2b028775a585b0586736eb21fb2d3b8f4c219cd0092261019f7ae569a970785a8e78ca0a5e922db66482f0a8fcf684fdcc4d899688ddef47648f5258f030895", 0x1000}], 0x6}, 0x7}, {{&(0x7f0000001b00)=@can={0x1d, r4}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001b80)="69579608e0248339c33bb6933de415f955901871a0e43a40c42590f6751421ccae240786d3f173d9e3f34f20acf7d8fd21c0273e558afadf2f2d673a276e11810e2edd7048f214412d4b14da28e042b7e1c17dd987393da7f7361695f209666dc50cb1770fe2180ad29906de5e", 0x6d}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="fcf1144e37a59230a2c277e6470582f1525fe58ee69aea7a08981486b2fcea91a5ee06540be61209529c67703df887a5d5559d438134dc2579c747ab148d0c6e5576cb3bde9356c61aa0bf807fc00d08cac016d3e78e718df056668285", 0x5d}, {&(0x7f0000001cc0)="4715e834bfa5f4860972a6020b47c6873d6ef24bb06da4f4988ed69317ecd2e605befe850b395f275d429d7abb3e13682e4403a7f994e1fd15918d6cc75d81eea92c4949a72f36b0c9e7d0427a", 0x4d}, {&(0x7f0000001d40)="435479446dcfcfda8c7fc93e2295", 0xe}], 0x5}, 0x3}, {{&(0x7f0000001e00)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e80)="eadde6e70267768f2bdea7244df6395098652a01846a3f347821ecef579cf527fc2586deb502fe24bb342fc8c6bd2373b38d3c0acb7a2ab5c0a7e034a0af1c3d75168aa29601c4003e7153629a769466cdf4739f752e0d728688df06cddfa64ebab930cfe43e477b2159b2824312dc097c1e886e67496f621a9026fedac6f898", 0x80}, {&(0x7f0000001f00)="c871435a0af417e48342bed40d69b0115cfc0fdb2638a1525c4f6fca26a13a8388fc01b8dcfdf32c30c12d66e976afb4c84ba6b5f317624bae8967cfe095ffd3bf91ab1c5357d6b4dc348141e6fbf4cfeaeccad5fa2a2c20215dd4173946c74295d7289ca57fa6ee77d34b0f86d28986f6bc3147009668af79a0b2ef36", 0x7d}, {&(0x7f0000001f80)="15f7631023200334ea6f723cdb5b0f5c055d07baa6d0d1e54992b74dd059788aad3a47a5f6c8b50601e8ad2d0e999c09c11f7a288f1a3049519574e22afa867fafe3af6e79d56d9fb832c26f447ccba18481c62f2c3b66df65e4a9a471d716e688e0a27a224dae6921beaea1232841f36e76dc755e11136319ef081e8d818c00a1783ae2764178e0e4332045559498a1cb0017d58aadb68ecacb4840c560c8969f4397fa", 0xa4}, {&(0x7f0000002040)="b5d80e4b5a5bcb8f40d893e314c22f9a5a9d6dbab40bbecc4df84a7f82da6ddea9f6c216743d350bcb0e9e2401e26df795345cf58e49b0bb0ba2d17a3c63eb8093a2a6e94c65805caf77557c1c22aff14cf1821b1196c3407cd1a629d53b99243e42908c84d63ce149292131c3388162a1afa5ad86a50aa01303fff1e8b7bc625f5211ef383c7a86c2d355697e56bfaf85487bece93c52ed164e2eee49021b99f987742beafff60a5a5505a9c4992b090fe1df33435a2262b3a3ebf7555b0ae28b2d5b1efa3cd701176bf220d7f244399e", 0xd1}], 0x4, &(0x7f00000019c0)=ANY=[@ANYBLOB="400000000000000001010000f7ffffff9341dc2ad7137cd11bbd96cc1ba3efa31e210281944f5eba6c1e3a38cdc41814fc011929405faf0db9d3680bce510a80f6f9517bd7f23103f7f9c217"], 0x40}, 0x6c8d}], 0x4, 0x40000) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r5) ioctl$RTC_AIE_OFF(r5, 0x7002) r6 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r6, 0x0, 0x0) [ 628.544133][T31600] FAULT_INJECTION: forcing a failure. [ 628.544133][T31600] name failslab, interval 1, probability 0, space 0, times 0 [ 628.580837][T31601] overlayfs: './file0' not a directory 10:19:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 628.593494][T31600] CPU: 1 PID: 31600 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 628.602544][T31600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.612602][T31600] Call Trace: [ 628.615913][T31600] dump_stack+0x1db/0x2d0 [ 628.620255][T31600] ? dump_stack_print_info.cold+0x20/0x20 [ 628.625984][T31600] ? __x64_sys_mount+0xbe/0x150 [ 628.630850][T31600] ? do_syscall_64+0x1a3/0x800 [ 628.635621][T31600] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.641704][T31600] ? print_usage_bug+0xd0/0xd0 [ 628.646478][T31600] should_fail.cold+0xa/0x14 [ 628.651080][T31600] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 628.656907][T31600] ? ___might_sleep+0x1e7/0x310 [ 628.661761][T31600] ? arch_local_save_flags+0x50/0x50 [ 628.667060][T31600] __should_failslab+0x121/0x190 [ 628.672003][T31600] should_failslab+0x9/0x14 [ 628.676508][T31600] kmem_cache_alloc_trace+0x2d1/0x760 [ 628.681908][T31600] __memcg_init_list_lru_node+0xef/0x2e0 [ 628.687628][T31600] ? kvfree_rcu+0x20/0x20 [ 628.691939][T31600] ? __kmalloc_node+0x4e/0x70 [ 628.696597][T31600] __list_lru_init+0x4d9/0x850 [ 628.701346][T31600] ? list_lru_destroy+0x520/0x520 [ 628.706368][T31600] ? down_read+0x120/0x120 [ 628.710778][T31600] ? init_wait_entry+0x1c0/0x1c0 [ 628.715700][T31600] alloc_super+0x8f2/0xa10 [ 628.720116][T31600] ? destroy_unused_super.part.0+0x110/0x110 [ 628.726104][T31600] sget_userns+0x164/0x6c0 [ 628.730951][T31600] ? get_anon_bdev+0xc0/0xc0 [ 628.735526][T31600] ? vfs_get_super+0x260/0x260 [ 628.740288][T31600] ? security_capable+0x9b/0xd0 [ 628.745122][T31600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 628.751343][T31600] ? ns_capable_common+0x93/0x100 [ 628.756349][T31600] ? get_anon_bdev+0xc0/0xc0 [ 628.760921][T31600] sget+0x10c/0x150 [ 628.764709][T31600] ? ovl_show_options+0x550/0x550 [ 628.769729][T31600] mount_nodev+0x31/0x110 [ 628.774039][T31600] ovl_mount+0x2d/0x40 [ 628.778089][T31600] ? ovl_own_xattr_set+0x10/0x10 [ 628.783010][T31600] legacy_get_tree+0xf2/0x200 [ 628.787665][T31600] vfs_get_tree+0x123/0x450 [ 628.792161][T31600] do_mount+0x1622/0x2fa0 [ 628.796479][T31600] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 628.801923][T31600] ? copy_mount_string+0x40/0x40 [ 628.806865][T31600] ? copy_mount_options+0x234/0x440 [ 628.812059][T31600] ? __sanitizer_cov_trace_pc+0x32/0x50 [ 628.817587][T31600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 628.823827][T31600] ? copy_mount_options+0x30e/0x440 [ 628.829033][T31600] ksys_mount+0xdb/0x150 [ 628.833262][T31600] __x64_sys_mount+0xbe/0x150 [ 628.837934][T31600] do_syscall_64+0x1a3/0x800 [ 628.842507][T31600] ? syscall_return_slowpath+0x5f0/0x5f0 [ 628.848121][T31600] ? prepare_exit_to_usermode+0x232/0x3b0 [ 628.853839][T31600] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 628.859396][T31600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 628.865382][T31600] RIP: 0033:0x458099 [ 628.869264][T31600] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 628.888935][T31600] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 628.897325][T31600] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 628.905290][T31600] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 628.913266][T31600] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 628.921220][T31600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 628.929185][T31600] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 628.955731][T31606] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:54 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4500, 0xd1) 10:19:54 executing program 5 (fault-call:1 fault-nth:49): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 629.029555][T31609] overlayfs: unrecognized mount option "utperdir=./file0" or missing value 10:19:54 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xd000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 629.086015][T31614] FAULT_INJECTION: forcing a failure. [ 629.086015][T31614] name failslab, interval 1, probability 0, space 0, times 0 [ 629.108036][T31614] CPU: 1 PID: 31614 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 629.114120][T31617] overlayfs: unrecognized mount option "utperdir=./file0" or missing value [ 629.117089][T31614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:19:55 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x20000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 629.117096][T31614] Call Trace: [ 629.117121][T31614] dump_stack+0x1db/0x2d0 [ 629.117142][T31614] ? dump_stack_print_info.cold+0x20/0x20 [ 629.117159][T31614] ? __x64_sys_mount+0xbe/0x150 [ 629.117175][T31614] ? do_syscall_64+0x1a3/0x800 [ 629.117193][T31614] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 629.117209][T31614] ? print_usage_bug+0xd0/0xd0 [ 629.117232][T31614] should_fail.cold+0xa/0x14 [ 629.138601][T31621] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:55 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x20100000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 629.139154][T31614] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 629.139179][T31614] ? ___might_sleep+0x1e7/0x310 [ 629.185432][T31624] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 629.188198][T31614] ? arch_local_save_flags+0x50/0x50 [ 629.188228][T31614] __should_failslab+0x121/0x190 [ 629.188250][T31614] should_failslab+0x9/0x14 [ 629.217010][T31614] kmem_cache_alloc_trace+0x2d1/0x760 [ 629.217030][T31614] __memcg_init_list_lru_node+0xef/0x2e0 10:19:55 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3a000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x3f00, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 629.217043][T31614] ? kvfree_rcu+0x20/0x20 [ 629.217055][T31614] ? __kmalloc_node+0x4e/0x70 [ 629.217071][T31614] __list_lru_init+0x4d9/0x850 [ 629.217084][T31614] ? list_lru_destroy+0x520/0x520 [ 629.217099][T31614] ? down_read+0x120/0x120 [ 629.217117][T31614] ? init_wait_entry+0x1c0/0x1c0 [ 629.217135][T31614] alloc_super+0x8f2/0xa10 [ 629.217150][T31614] ? destroy_unused_super.part.0+0x110/0x110 [ 629.217175][T31614] sget_userns+0x164/0x6c0 [ 629.217188][T31614] ? get_anon_bdev+0xc0/0xc0 [ 629.217200][T31614] ? vfs_get_super+0x260/0x260 [ 629.217211][T31614] ? security_capable+0x9b/0xd0 [ 629.217226][T31614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 629.217236][T31614] ? ns_capable_common+0x93/0x100 [ 629.217250][T31614] ? get_anon_bdev+0xc0/0xc0 [ 629.217259][T31614] sget+0x10c/0x150 [ 629.217272][T31614] ? ovl_show_options+0x550/0x550 [ 629.217282][T31614] mount_nodev+0x31/0x110 [ 629.217293][T31614] ovl_mount+0x2d/0x40 [ 629.217303][T31614] ? ovl_own_xattr_set+0x10/0x10 [ 629.217317][T31614] legacy_get_tree+0xf2/0x200 [ 629.217329][T31614] vfs_get_tree+0x123/0x450 [ 629.217345][T31614] do_mount+0x1622/0x2fa0 [ 629.217360][T31614] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 629.217389][T31614] ? copy_mount_string+0x40/0x40 10:19:55 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x2, [0x0, 0x0]}) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:55 executing program 5 (fault-call:1 fault-nth:50): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:55 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4900, 0xd1) 10:19:55 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) getpeername$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 629.217412][T31614] ? copy_mount_options+0x234/0x440 [ 629.217426][T31614] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 629.217443][T31614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 629.217458][T31614] ? copy_mount_options+0x30e/0x440 [ 629.217478][T31614] ksys_mount+0xdb/0x150 [ 629.217497][T31614] __x64_sys_mount+0xbe/0x150 [ 629.217515][T31614] do_syscall_64+0x1a3/0x800 [ 629.217533][T31614] ? syscall_return_slowpath+0x5f0/0x5f0 [ 629.217548][T31614] ? prepare_exit_to_usermode+0x232/0x3b0 [ 629.217570][T31614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 629.217596][T31614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 629.217607][T31614] RIP: 0033:0x458099 [ 629.217622][T31614] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 629.217628][T31614] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 629.217640][T31614] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 629.217650][T31614] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 629.217660][T31614] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 629.217669][T31614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 629.217678][T31614] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 629.291897][T31627] overlayfs: './file0' not a directory [ 629.321667][T31632] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 629.451453][T31641] overlayfs: './file0' not a directory 10:19:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x1000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00'}, &(0x7f0000000140)=0x54) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xffffffffffffffff, 0x20080) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffffffffff8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000080)={r3, 0x1, 0x400}, 0x8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 629.521749][T31645] FAULT_INJECTION: forcing a failure. [ 629.521749][T31645] name failslab, interval 1, probability 0, space 0, times 0 [ 629.660925][T31658] overlayfs: './file0' not a directory [ 629.670046][T31645] CPU: 0 PID: 31645 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 629.679079][T31645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.689134][T31645] Call Trace: [ 629.692434][T31645] dump_stack+0x1db/0x2d0 [ 629.696773][T31645] ? dump_stack_print_info.cold+0x20/0x20 [ 629.702503][T31645] ? __x64_sys_mount+0xbe/0x150 [ 629.707357][T31645] ? do_syscall_64+0x1a3/0x800 [ 629.712123][T31645] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 629.718194][T31645] ? print_usage_bug+0xd0/0xd0 [ 629.722967][T31645] should_fail.cold+0xa/0x14 [ 629.727563][T31645] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 629.733376][T31645] ? ___might_sleep+0x1e7/0x310 [ 629.738236][T31645] ? arch_local_save_flags+0x50/0x50 [ 629.743556][T31645] __should_failslab+0x121/0x190 [ 629.748498][T31645] should_failslab+0x9/0x14 [ 629.750129][T31662] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:55 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x1) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000600)='./file0\x00', 0x0, 0x0) 10:19:55 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x3f000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:55 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x4c00, 0xd1) [ 629.753003][T31645] kmem_cache_alloc_trace+0x2d1/0x760 [ 629.753032][T31645] __memcg_init_list_lru_node+0xef/0x2e0 [ 629.753051][T31645] ? kvfree_rcu+0x20/0x20 [ 629.753065][T31645] ? __kmalloc_node+0x4e/0x70 [ 629.753086][T31645] __list_lru_init+0x4d9/0x850 [ 629.786002][T31645] ? list_lru_destroy+0x520/0x520 [ 629.791032][T31645] ? down_read+0x120/0x120 [ 629.795540][T31645] ? init_wait_entry+0x1c0/0x1c0 [ 629.800489][T31645] alloc_super+0x8f2/0xa10 [ 629.804913][T31645] ? destroy_unused_super.part.0+0x110/0x110 10:19:55 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x40000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 629.810918][T31645] sget_userns+0x164/0x6c0 [ 629.815341][T31645] ? get_anon_bdev+0xc0/0xc0 [ 629.819935][T31645] ? vfs_get_super+0x260/0x260 [ 629.824700][T31645] ? security_capable+0x9b/0xd0 [ 629.830025][T31645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 629.836268][T31645] ? ns_capable_common+0x93/0x100 [ 629.841300][T31645] ? get_anon_bdev+0xc0/0xc0 [ 629.845905][T31645] sget+0x10c/0x150 [ 629.849716][T31645] ? ovl_show_options+0x550/0x550 [ 629.854739][T31645] mount_nodev+0x31/0x110 10:19:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x400002) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r2, 0x7}}, 0x10) [ 629.859068][T31645] ovl_mount+0x2d/0x40 [ 629.863135][T31645] ? ovl_own_xattr_set+0x10/0x10 [ 629.868069][T31645] legacy_get_tree+0xf2/0x200 [ 629.870315][T31666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 629.872746][T31645] vfs_get_tree+0x123/0x450 [ 629.872765][T31645] do_mount+0x1622/0x2fa0 [ 629.872788][T31645] ? copy_mount_string+0x40/0x40 [ 629.894768][T31645] ? kmem_cache_alloc_trace+0x354/0x760 [ 629.900336][T31645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 629.906579][T31645] ? copy_mount_options+0x30e/0x440 10:19:55 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x48000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 629.911807][T31645] ksys_mount+0xdb/0x150 [ 629.916074][T31645] __x64_sys_mount+0xbe/0x150 [ 629.920758][T31645] do_syscall_64+0x1a3/0x800 [ 629.925364][T31645] ? syscall_return_slowpath+0x5f0/0x5f0 [ 629.931002][T31645] ? prepare_exit_to_usermode+0x232/0x3b0 [ 629.936748][T31645] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 629.942339][T31645] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 629.948244][T31645] RIP: 0033:0x458099 [ 629.951070][T31671] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 629.952154][T31645] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 629.952164][T31645] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 629.952179][T31645] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 629.952189][T31645] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 629.952203][T31645] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 630.012738][T31645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 630.020713][T31645] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:55 executing program 5 (fault-call:1 fault-nth:51): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:55 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x4c000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x3, 0x8000000000000000}}, 0xfffffffffffffea3) 10:19:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x2000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 630.103838][T31678] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl(r0, 0xfff, &(0x7f0000000000)="b574629f500301230ee27a15c78598c482306b8288811c4ed32ae0cdaf089612ae93416d0482cd3555e2375013e1fa33bb04bf0cc6b948f0782377ca5593693d162336b1fe44ed5606552d1fe62326995a79d01610a15eb0f7d705fe47ef897efdf8810af30b40bdc2dccfdd5ff6e0d90f1351156ac9c4f62b46297504cc7e749e46320aabe6e6a0eb1591a418c42095f22a60e72620cbc7f1868b64ccc71e89789938a7ec922e470f4eafab002d544c2fc729ae5afbeca254eb910d5a51b3bb80a051a047") socket(0x6, 0x7, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x1cf) [ 630.161310][T31687] FAULT_INJECTION: forcing a failure. [ 630.161310][T31687] name failslab, interval 1, probability 0, space 0, times 0 [ 630.177619][T31689] overlayfs: filesystem on './file0' not supported as upperdir [ 630.211928][T31687] CPU: 1 PID: 31687 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 630.220989][T31687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.231045][T31687] Call Trace: [ 630.234342][T31687] dump_stack+0x1db/0x2d0 [ 630.238683][T31687] ? dump_stack_print_info.cold+0x20/0x20 [ 630.244408][T31687] ? __x64_sys_mount+0xbe/0x150 [ 630.249254][T31687] ? do_syscall_64+0x1a3/0x800 [ 630.254118][T31687] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.260166][T31687] ? print_usage_bug+0xd0/0xd0 [ 630.264955][T31687] should_fail.cold+0xa/0x14 [ 630.269570][T31687] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 630.275362][T31687] ? ___might_sleep+0x1e7/0x310 [ 630.280190][T31687] ? arch_local_save_flags+0x50/0x50 [ 630.285461][T31687] __should_failslab+0x121/0x190 [ 630.290378][T31687] should_failslab+0x9/0x14 [ 630.294861][T31687] kmem_cache_alloc_trace+0x2d1/0x760 [ 630.300231][T31687] __memcg_init_list_lru_node+0xef/0x2e0 [ 630.305861][T31687] ? kvfree_rcu+0x20/0x20 [ 630.310193][T31687] ? __kmalloc_node+0x4e/0x70 [ 630.314864][T31687] __list_lru_init+0x4d9/0x850 [ 630.319619][T31687] ? list_lru_destroy+0x520/0x520 [ 630.324631][T31687] ? down_read+0x120/0x120 [ 630.329028][T31687] ? init_wait_entry+0x1c0/0x1c0 [ 630.333951][T31687] alloc_super+0x8f2/0xa10 [ 630.338346][T31687] ? destroy_unused_super.part.0+0x110/0x110 [ 630.344313][T31687] sget_userns+0x164/0x6c0 [ 630.348709][T31687] ? get_anon_bdev+0xc0/0xc0 [ 630.353278][T31687] ? vfs_get_super+0x260/0x260 [ 630.358030][T31687] ? security_capable+0x9b/0xd0 [ 630.362871][T31687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 630.369087][T31687] ? ns_capable_common+0x93/0x100 [ 630.374096][T31687] ? get_anon_bdev+0xc0/0xc0 [ 630.378683][T31687] sget+0x10c/0x150 [ 630.382486][T31687] ? ovl_show_options+0x550/0x550 [ 630.387502][T31687] mount_nodev+0x31/0x110 [ 630.391812][T31687] ovl_mount+0x2d/0x40 [ 630.395860][T31687] ? ovl_own_xattr_set+0x10/0x10 [ 630.400785][T31687] legacy_get_tree+0xf2/0x200 [ 630.405441][T31687] vfs_get_tree+0x123/0x450 [ 630.409927][T31687] do_mount+0x1622/0x2fa0 [ 630.414239][T31687] ? copy_mount_string+0x40/0x40 [ 630.419167][T31687] ? kmem_cache_alloc_trace+0x354/0x760 [ 630.424695][T31687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 630.430913][T31687] ? copy_mount_options+0x30e/0x440 [ 630.436093][T31687] ksys_mount+0xdb/0x150 [ 630.440422][T31687] __x64_sys_mount+0xbe/0x150 [ 630.445095][T31687] do_syscall_64+0x1a3/0x800 [ 630.449673][T31687] ? syscall_return_slowpath+0x5f0/0x5f0 [ 630.455313][T31687] ? prepare_exit_to_usermode+0x232/0x3b0 [ 630.461030][T31687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 630.466564][T31687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.472436][T31687] RIP: 0033:0x458099 [ 630.476309][T31687] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 630.495891][T31687] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 630.504373][T31687] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20201, 0x1) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000080)=0x101) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65302c776f7289ddcdcd030ea03b696c65315c002c1de4a9ee53b561ae52b398169fa84a3a876eecc26f3a52"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x3c3) 10:19:56 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x5c000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x3f000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 630.512324][T31687] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 630.520287][T31687] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 630.528246][T31687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 630.536200][T31687] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 630.559302][T31696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.585595][T31693] overlayfs: './file0' not a directory [ 630.594478][T31696] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.602907][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 630.602920][ T26] audit: type=1804 audit(1547720396.471:465): pid=31680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1037/file0/file0" dev="overlay" ino=106337 res=1 10:19:56 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x5000, 0xd1) 10:19:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x502) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2000000000000000, 0x0}}, 0x20) 10:19:56 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x60000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:56 executing program 5 (fault-call:1 fault-nth:52): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x1000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 630.693032][ T26] audit: type=1804 audit(1547720396.471:466): pid=31680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1037/file0/file0" dev="overlay" ino=106337 res=1 [ 630.703377][T31703] overlayfs: unrecognized mount option "wor‰ÝÍÍ ;ile1\" or missing value [ 630.758920][T31709] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.759129][T31708] FAULT_INJECTION: forcing a failure. [ 630.759129][T31708] name failslab, interval 1, probability 0, space 0, times 0 [ 630.791974][T31708] CPU: 1 PID: 31708 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 10:19:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xa0a}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x2, 0x3ff, 0x3, r2}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 10:19:56 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x68000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 630.793963][T31713] overlayfs: unrecognized mount option "wor‰ÝÍÍ ;ile1\" or missing value [ 630.801015][T31708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.801022][T31708] Call Trace: [ 630.801047][T31708] dump_stack+0x1db/0x2d0 [ 630.801068][T31708] ? dump_stack_print_info.cold+0x20/0x20 [ 630.801086][T31708] ? __x64_sys_mount+0xbe/0x150 [ 630.801101][T31708] ? do_syscall_64+0x1a3/0x800 [ 630.801118][T31708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.801135][T31708] ? print_usage_bug+0xd0/0xd0 [ 630.801156][T31708] should_fail.cold+0xa/0x14 10:19:56 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x6c000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 630.801176][T31708] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 630.801197][T31708] ? ___might_sleep+0x1e7/0x310 [ 630.855599][T31719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.858082][T31708] ? arch_local_save_flags+0x50/0x50 [ 630.858110][T31708] __should_failslab+0x121/0x190 [ 630.858132][T31708] should_failslab+0x9/0x14 [ 630.891680][T31708] kmem_cache_alloc_trace+0x2d1/0x760 [ 630.897082][T31708] __memcg_init_list_lru_node+0xef/0x2e0 [ 630.902728][T31708] ? kvfree_rcu+0x20/0x20 10:19:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendto(r0, &(0x7f0000000240)="65b3f7b3e7c4ed421db17a08fa6065ee47c13dbc0e58d91150410c2f783d94f3bdf0fd61439d976d921ce82f16d1fa9ba420023aba9a53d079a7c57852312733ddad52a10670704ee772209b402b38e43fde1ad2deff6241f75a06384c2a1e64c997b2d63c2d9cc2617c2421be20542b0ac8492d0d0f3a66b22c0f7f8937754f2c14585c3679b68470311c1953e7d53b79c47410ba5061bb65b6a43268041affa8175e0f0d995eb7177e6efd3ee883c3b3110658d75e7440d4f48c9850a55e3f84fa98ad4158269416fd26bd681264b500092a977b86276c4d8b0c4ad0c5ae203647", 0xe2, 0x20000000, &(0x7f0000000000)=@in6={0xa, 0x4e20, 0xff, @empty, 0xcbe}, 0x80) mknodat(r1, &(0x7f0000000400)='./file0\x00', 0x8000, 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000001c0)="5825fb17c67b6cd9300608aeeb8b6e93552d09be4c72704a7c7a7e71d4f2029a93c4e427127b5887132f2d65ed283063c082686087d2c35a57a13655e0b3663c0b5db7c0935631036ce0") write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000004c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x36, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, {0xa, 0x4e22, 0x3, @mcast2, 0x2}, r2}}, 0x48) socket$caif_stream(0x25, 0x1, 0x2) [ 630.907071][T31708] ? __kmalloc_node+0x4e/0x70 [ 630.911762][T31708] __list_lru_init+0x4d9/0x850 [ 630.916533][T31708] ? list_lru_destroy+0x520/0x520 [ 630.921570][T31708] ? down_read+0x120/0x120 [ 630.925059][T31725] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.925991][T31708] ? init_wait_entry+0x1c0/0x1c0 [ 630.926019][T31708] alloc_super+0x8f2/0xa10 [ 630.926038][T31708] ? destroy_unused_super.part.0+0x110/0x110 [ 630.949571][T31708] sget_userns+0x164/0x6c0 [ 630.953996][T31708] ? get_anon_bdev+0xc0/0xc0 [ 630.958594][T31708] ? vfs_get_super+0x260/0x260 [ 630.963364][T31708] ? security_capable+0x9b/0xd0 [ 630.968225][T31708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 630.974480][T31708] ? ns_capable_common+0x93/0x100 [ 630.974505][T31708] ? get_anon_bdev+0xc0/0xc0 [ 630.974519][T31708] sget+0x10c/0x150 [ 630.974539][T31708] ? ovl_show_options+0x550/0x550 [ 630.974552][T31708] mount_nodev+0x31/0x110 [ 630.998175][T31708] ovl_mount+0x2d/0x40 [ 630.998512][ T26] audit: type=1804 audit(1547720396.671:467): pid=31703 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1180/file0/file0" dev="sda1" ino=16675 res=1 [ 631.002246][T31708] ? ovl_own_xattr_set+0x10/0x10 [ 631.002263][T31708] legacy_get_tree+0xf2/0x200 [ 631.002281][T31708] vfs_get_tree+0x123/0x450 [ 631.027603][ T26] audit: type=1804 audit(1547720396.671:468): pid=31703 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1180/file0/file0" dev="sda1" ino=16675 res=1 [ 631.032366][T31708] do_mount+0x1622/0x2fa0 [ 631.032392][T31708] ? copy_mount_string+0x40/0x40 [ 631.032410][T31708] ? kmem_cache_alloc_trace+0x354/0x760 [ 631.032430][T31708] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 631.087108][T31708] ? _copy_from_user+0xdd/0x150 [ 631.092047][T31708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 631.098266][T31708] ? copy_mount_options+0x30e/0x440 [ 631.103575][T31708] ksys_mount+0xdb/0x150 [ 631.107815][T31708] __x64_sys_mount+0xbe/0x150 [ 631.112497][T31708] do_syscall_64+0x1a3/0x800 [ 631.117075][T31708] ? syscall_return_slowpath+0x5f0/0x5f0 [ 631.122712][T31708] ? prepare_exit_to_usermode+0x232/0x3b0 [ 631.128421][T31708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 631.133979][T31708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.139868][T31708] RIP: 0033:0x458099 [ 631.143749][T31708] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 631.163332][T31708] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 631.171726][T31708] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 631.179681][T31708] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 631.187642][T31708] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 631.195594][T31708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 10:19:57 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) accept$unix(r0, &(0x7f0000000480), &(0x7f0000000240)=0x6e) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x100000000000000, 0x401}, {0x0, 0x8bb}]}, 0x14, 0x1) write$apparmor_exec(r1, &(0x7f0000000040)={'stack ', 'workdir'}, 0xd) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) recvfrom$inet6(r2, &(0x7f0000000400)=""/123, 0x7b, 0x10120, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x19}, 0xffffffff}, 0x1c) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000500)={[{0x3, 0x7, 0x8, 0xffff, 0xe505, 0xe6, 0xc0, 0x1, 0x4, 0x400, 0x3, 0x80, 0xfffffffffffffff9}, {0xff, 0xce62, 0x6, 0x3c, 0x7fff, 0x8, 0x2, 0x6, 0x10000, 0x9, 0x8, 0xe35, 0x5}, {0x9000000000000000, 0x20, 0xc4e3, 0x1, 0xa22, 0xfffffffffffffffe, 0xffffffff, 0x20, 0x1ff, 0x8, 0x0, 0xffffffffffffffff, 0x4}], 0x7}) write$binfmt_aout(r2, 0x0, 0xfffffffffffffdab) 10:19:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x74000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 631.203552][T31708] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 631.226759][T31733] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 10:19:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x7a000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 631.253486][T31716] overlayfs: './file0' not a directory [ 631.258011][T31735] overlayfs: unrecognized mount option "upperdir" or missing value [ 631.272348][ T26] audit: type=1804 audit(1547720397.151:469): pid=31715 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1038/file0" dev="sda1" ino=16738 res=1 [ 631.286996][T31736] overlayfs: unrecognized mount option "upperdir" or missing value 10:19:57 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x5400, 0xd1) 10:19:57 executing program 5 (fault-call:1 fault-nth:53): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:57 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) 10:19:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x100000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x2cf, 0xfa00, {0xfffffffffffffffd, 0x0, 0x0, 0x2000000b}}, 0xff3b) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x46c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf5c9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa99}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x28}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8cd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfac9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa76e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x36}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xfc, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x70, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}]}, 0x46c}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) [ 631.360751][T31739] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 631.378412][ T26] audit: type=1804 audit(1547720397.191:470): pid=31735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1181/file0/file0" dev="sda1" ino=16770 res=1 10:19:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x8cffffff, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 631.421939][T31743] FAULT_INJECTION: forcing a failure. [ 631.421939][T31743] name failslab, interval 1, probability 0, space 0, times 0 [ 631.439574][ T26] audit: type=1804 audit(1547720397.191:471): pid=31735 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1181/file0/file0" dev="sda1" ino=16770 res=1 [ 631.440926][T31746] overlayfs: missing 'lowerdir' [ 631.469045][ T26] audit: type=1804 audit(1547720397.201:472): pid=31723 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1038/file0" dev="sda1" ino=16738 res=1 [ 631.478989][T31743] CPU: 0 PID: 31743 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 631.502327][T31743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.512390][T31743] Call Trace: [ 631.515705][T31743] dump_stack+0x1db/0x2d0 10:19:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x13, 0xfa00, {0x0, 0x0, 0x2, 0xfffffffffffffffc}}, 0xfffffffffffffefd) [ 631.520045][T31743] ? dump_stack_print_info.cold+0x20/0x20 [ 631.525766][T31743] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 631.531354][T31743] should_fail.cold+0xa/0x14 [ 631.535946][T31743] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 631.541769][T31743] ? ___might_sleep+0x1e7/0x310 [ 631.546628][T31743] ? arch_local_save_flags+0x50/0x50 [ 631.551926][T31743] ? ___preempt_schedule_notrace+0x16/0x29 [ 631.557745][T31743] __should_failslab+0x121/0x190 [ 631.562697][T31743] should_failslab+0x9/0x14 [ 631.567203][T31743] kmem_cache_alloc_trace+0x2d1/0x760 10:19:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xc0ed0000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 631.572588][T31743] __memcg_init_list_lru_node+0xef/0x2e0 [ 631.578225][T31743] ? kvfree_rcu+0x20/0x20 [ 631.582557][T31743] ? __kmalloc_node+0x4e/0x70 [ 631.587244][T31743] __list_lru_init+0x4d9/0x850 [ 631.592009][T31743] ? list_lru_destroy+0x520/0x520 [ 631.595253][T31756] overlayfs: './file0' not a directory [ 631.597039][T31743] ? down_read+0x120/0x120 [ 631.597059][T31743] ? init_wait_entry+0x1c0/0x1c0 [ 631.597082][T31743] alloc_super+0x8f2/0xa10 [ 631.607981][ T26] audit: type=1804 audit(1547720397.491:473): pid=31750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir290566229/syzkaller.w9gd5H/1039/file0/file0" dev="overlay" ino=105160 res=1 [ 631.611857][T31743] ? destroy_unused_super.part.0+0x110/0x110 [ 631.611890][T31743] sget_userns+0x164/0x6c0 [ 631.611908][T31743] ? get_anon_bdev+0xc0/0xc0 10:19:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x200000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 631.624410][ T26] audit: type=1804 audit(1547720397.501:474): pid=31746 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir834581476/syzkaller.CJUpbj/1182/file0/file0" dev="sda1" ino=16802 res=1 [ 631.641805][T31743] ? vfs_get_super+0x260/0x260 [ 631.641819][T31743] ? security_capable+0x9b/0xd0 [ 631.641840][T31743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 631.641855][T31743] ? ns_capable_common+0x93/0x100 [ 631.641876][T31743] ? get_anon_bdev+0xc0/0xc0 [ 631.641888][T31743] sget+0x10c/0x150 [ 631.641904][T31743] ? ovl_show_options+0x550/0x550 [ 631.641917][T31743] mount_nodev+0x31/0x110 [ 631.641933][T31743] ovl_mount+0x2d/0x40 [ 631.641947][T31743] ? ovl_own_xattr_set+0x10/0x10 [ 631.641963][T31743] legacy_get_tree+0xf2/0x200 [ 631.641980][T31743] vfs_get_tree+0x123/0x450 [ 631.642000][T31743] do_mount+0x1622/0x2fa0 [ 631.642024][T31743] ? copy_mount_string+0x40/0x40 [ 631.642043][T31743] ? kmem_cache_alloc_trace+0x354/0x760 [ 631.642060][T31743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 631.642075][T31743] ? _copy_from_user+0xdd/0x150 [ 631.642093][T31743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 10:19:57 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x5800, 0xd1) 10:19:57 executing program 5 (fault-call:1 fault-nth:54): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:57 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000240)="37fdb0ccd06e6f9ff9a901ed22e100b0039a016e25f75a74c33ab8b535f1dcf4e1779d5a6529490a8a2037241ffdcb631c113297ca1f76c7a652b0f76c1d5ca49e859893e38726d73d6a00b85ccad0973b6346b60c4bf191ac01122c9f310b5073f950403a4af1d55574129682c7ce0422d5831681e444136dd37a0d4934d1469219aa7ee2f0b1b2bb73f8acd8b59770a91a7d3d955df6a284f6bd6506e0506521dd", 0xa2, 0xffffffffffffffff) r1 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000300)="5b0d31153afcd596a5d31340f899169d8d9070baa6187458e036d87821679ed33be93f54bd7a6bcf756aa155985df70aeecbe236f8fd52804c6abb137e", 0x3d, 0xfffffffffffffffe) keyctl$negate(0xd, r0, 0x81, r1) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x856e, 0x2, 0x4}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file1\x00', r2}, 0x10) r3 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r3, 0x0, 0x0) 10:19:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x3f00000000000000, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 631.642109][T31743] ? copy_mount_options+0x30e/0x440 [ 631.642130][T31743] ksys_mount+0xdb/0x150 [ 631.642149][T31743] __x64_sys_mount+0xbe/0x150 [ 631.642170][T31743] do_syscall_64+0x1a3/0x800 [ 631.642188][T31743] ? syscall_return_slowpath+0x5f0/0x5f0 [ 631.642205][T31743] ? prepare_exit_to_usermode+0x232/0x3b0 [ 631.642225][T31743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 631.642250][T31743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.642262][T31743] RIP: 0033:0x458099 [ 631.642277][T31743] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 631.642285][T31743] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 631.642299][T31743] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 631.642308][T31743] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 631.642317][T31743] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 631.642325][T31743] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 631.642333][T31743] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 631.744250][T31766] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 631.827610][T31772] FAULT_INJECTION: forcing a failure. [ 631.827610][T31772] name failslab, interval 1, probability 0, space 0, times 0 [ 631.870433][T31772] CPU: 0 PID: 31772 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 631.888104][T31772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.888110][T31772] Call Trace: [ 631.888132][T31772] dump_stack+0x1db/0x2d0 [ 631.888151][T31772] ? dump_stack_print_info.cold+0x20/0x20 [ 631.908952][T31772] ? __x64_sys_mount+0xbe/0x150 [ 631.908969][T31772] ? do_syscall_64+0x1a3/0x800 [ 631.908985][T31772] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 631.909002][T31772] ? print_usage_bug+0xd0/0xd0 [ 631.909024][T31772] should_fail.cold+0xa/0x14 [ 631.909041][T31772] ? fault_create_debugfs_attr+0x1e0/0x1e0 10:19:57 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x2, 0x218802) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x1, @link_local}, 0x8, {0x2, 0x4e20, @multicast1}, 'ip6gre0\x00'}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r1, 0x23, &(0x7f0000000040)={0x3a, 0x65}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x73f}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}], 0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xf6ffffff, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 631.909062][T31772] ? ___might_sleep+0x1e7/0x310 [ 631.976976][T31772] ? arch_local_save_flags+0x50/0x50 [ 631.982284][T31772] __should_failslab+0x121/0x190 [ 631.987237][T31772] should_failslab+0x9/0x14 [ 631.991745][T31772] kmem_cache_alloc_trace+0x2d1/0x760 [ 631.997402][T31772] __memcg_init_list_lru_node+0xef/0x2e0 [ 632.003044][T31772] ? kvfree_rcu+0x20/0x20 [ 632.007384][T31772] ? __kmalloc_node+0x4e/0x70 [ 632.012073][T31772] __list_lru_init+0x4d9/0x850 [ 632.016848][T31772] ? list_lru_destroy+0x520/0x520 10:19:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xf9fdffff, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 632.021898][T31772] ? down_read+0x120/0x120 [ 632.026319][T31772] ? init_wait_entry+0x1c0/0x1c0 [ 632.031267][T31772] alloc_super+0x8f2/0xa10 [ 632.035691][T31772] ? destroy_unused_super.part.0+0x110/0x110 [ 632.041701][T31772] sget_userns+0x164/0x6c0 [ 632.046125][T31772] ? get_anon_bdev+0xc0/0xc0 [ 632.050726][T31772] ? vfs_get_super+0x260/0x260 [ 632.055497][T31772] ? security_capable+0x9b/0xd0 [ 632.060503][T31772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.065793][T31779] overlayfs: './file0' not a directory 10:19:57 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xfffffdf9, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 632.066740][T31772] ? ns_capable_common+0x93/0x100 [ 632.066759][T31772] ? get_anon_bdev+0xc0/0xc0 [ 632.066776][T31772] sget+0x10c/0x150 [ 632.075543][T31784] overlayfs: './file0' not a directory [ 632.077228][T31772] ? ovl_show_options+0x550/0x550 [ 632.077243][T31772] mount_nodev+0x31/0x110 [ 632.077260][T31772] ovl_mount+0x2d/0x40 [ 632.104490][T31772] ? ovl_own_xattr_set+0x10/0x10 [ 632.109446][T31772] legacy_get_tree+0xf2/0x200 [ 632.114132][T31772] vfs_get_tree+0x123/0x450 [ 632.118671][T31772] do_mount+0x1622/0x2fa0 10:19:58 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x5c00, 0xd1) [ 632.123025][T31772] ? copy_mount_string+0x40/0x40 [ 632.127971][T31772] ? kmem_cache_alloc_trace+0x354/0x760 [ 632.133533][T31772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.139778][T31772] ? copy_mount_options+0x30e/0x440 [ 632.144987][T31772] ksys_mount+0xdb/0x150 [ 632.149246][T31772] __x64_sys_mount+0xbe/0x150 [ 632.153937][T31772] do_syscall_64+0x1a3/0x800 [ 632.158533][T31772] ? syscall_return_slowpath+0x5f0/0x5f0 [ 632.164177][T31772] ? prepare_exit_to_usermode+0x232/0x3b0 [ 632.169913][T31772] ? trace_hardirqs_off_thunk+0x1a/0x1c 10:19:58 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xffffff7f, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 632.175479][T31772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.181372][T31772] RIP: 0033:0x458099 [ 632.185285][T31772] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 632.204885][T31772] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 632.213299][T31772] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 10:19:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/146) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x208000, 0x0) getpeername$ax25(r1, &(0x7f00000001c0)={{0x3, @default}, [@null, @default, @rose, @null, @remote, @rose, @rose]}, &(0x7f0000000140)=0x48) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000240)=0x969, 0x2) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000280)="cf382865574cae16affcf6c453274b823c364deef0e64faca40beb20642b6f5cf83943b7ee988703f469b0bd3a60b5aaca0e9e6bdda2d3bcd66bb686c5837c2ce24ebd104448522d0c4dc735a8ce6ab9f64a59fb92448e6f7de80e49c1a0328471b8cbae24a8d9558f439a3ed2caef88091da31a79fcbe7f16e1d8538fb0cc4306ce06a74cafe34a2e17595a78fc51aba3ff40216cb01d4d939bf10088ddc81c1dbda06f0d5714d564c68b5cf53f84b929f2e8953e27f1e81711349aae3a948ac57a92284a2652581ab0d1d33a7bbeaa204db2e33993dafa5c3bbbdc0a8f78db2c") r2 = syz_open_dev$admmidi(&(0x7f0000000a00)='/dev/admmidi#\x00', 0x1, 0x10000000400) sendmmsg$nfc_llcp(r1, &(0x7f0000000380), 0x0, 0x7a029f32167f7d42) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x180, 0x0, 0x270, 0x388, 0x0, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x20}}}, {{@ip={@rand_addr=0x8, @multicast1, 0xffffff00, 0x0, 'bridge0\x00', 'lo\x00', {0xff}, {0xff}, 0x32, 0x1, 0xc}, 0x0, 0x98, 0xc0}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x7}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x808, 0xc00, 0x1, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x5}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0xfff, 0x4, 0x0, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9ae, 0x7, @loopback, 0x4e22}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffffff, 0xff000000, 'bond0\x00', 'veth0_to_bond\x00', {}, {0xff}, 0x29, 0x3, 0x22}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x3}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) 10:19:58 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [{@measure='measure'}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'eth0eth1[procvmnet1@vboxnet0security!$eth1@#'}}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) fsetxattr(r1, &(0x7f0000000100)=@known='security.apparmor\x00', &(0x7f0000000140)='lowerdir', 0x8, 0x1) write$binfmt_aout(r1, 0x0, 0x0) 10:19:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa02, {0x0, 0x0}}, 0x20) [ 632.221274][T31772] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 632.229252][T31772] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 632.237225][T31772] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 632.245199][T31772] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:58 executing program 5 (fault-call:1 fault-nth:55): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:58 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x5f00, 0xd1) 10:19:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:58 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xffffff8c, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 632.358419][T31805] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value [ 632.391773][T31810] overlayfs: unrecognized mount option "smackfshat=overlay" or missing value 10:19:58 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xfffffff6, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20) [ 632.436461][T31816] overlayfs: './file0' not a directory [ 632.452538][T31817] FAULT_INJECTION: forcing a failure. [ 632.452538][T31817] name failslab, interval 1, probability 0, space 0, times 0 [ 632.486475][T31817] CPU: 0 PID: 31817 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 632.495639][T31817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.505696][T31817] Call Trace: [ 632.508995][T31817] dump_stack+0x1db/0x2d0 [ 632.513338][T31817] ? dump_stack_print_info.cold+0x20/0x20 [ 632.519064][T31817] ? __x64_sys_mount+0xbe/0x150 [ 632.523923][T31817] ? do_syscall_64+0x1a3/0x800 [ 632.528695][T31817] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.534773][T31817] ? print_usage_bug+0xd0/0xd0 [ 632.539551][T31817] should_fail.cold+0xa/0x14 [ 632.544160][T31817] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 632.549974][T31817] ? ___might_sleep+0x1e7/0x310 [ 632.554832][T31817] ? arch_local_save_flags+0x50/0x50 [ 632.560128][T31817] __should_failslab+0x121/0x190 [ 632.565070][T31817] should_failslab+0x9/0x14 [ 632.569578][T31817] kmem_cache_alloc_trace+0x2d1/0x760 [ 632.574970][T31817] __memcg_init_list_lru_node+0xef/0x2e0 [ 632.580623][T31817] ? kvfree_rcu+0x20/0x20 10:19:58 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x0) connect$pptp(r0, &(0x7f0000000240)={0x18, 0x2, {0x1, @empty}}, 0x1e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000400)=[{0xa86, 0x3, 0x3, 0x7fff, @tick=0x1, {0x6e07, 0x7}, {0x1879, 0x5}, @raw32={[0x2, 0x9, 0x100000000]}}, {0x5, 0x4, 0x7, 0x7fffffff, @time={r3, r4+30000000}, {0x0, 0x1}, {0x8, 0x400}, @queue={0x9ce, {0x6, 0x10000}}}, {0x9f0f, 0x5, 0x2, 0x5, @time={r5, r6+10000000}, {0x8, 0x81}, {0x6e, 0x1}, @ext={0xae, &(0x7f0000000300)="bfea3f7e5d23f0519b75fb63267a702c380d3a3570c20bd5a8403ee3ee3556a64f28fe6b4490c3a5b5dcdfa5dedde788a7c0b21343d40279754f155dc36bb80eef0e82930ec44a8e311a8ea813344b70eaaa0d0aebfa7ec1fb292048c1ddaa071a7038f5a56b19baa6ec422fe0746bda4b033bd3dc196593581f545b016828db65fcd50821889e751b96c854d1c2a3e5a67610856e2956fde02de3ff2aba86a1820da28c46209a0f686ea36b72d2"}}], 0x90) linkat(r0, &(0x7f00000004c0)='./file0\x00', r2, &(0x7f0000000500)='./file0\x00', 0x400) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x7b, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=""/123}, &(0x7f00000000c0)=0x78) 10:19:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x101000, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000001c0)={@remote, @remote, r2}, 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0x101, @loopback, 0x1}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e23, 0x80000000, @local, 0x20}, @in6={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, [], 0x22}, 0x3}], 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x1f, 0x4) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xa4e9dde3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd91}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffc}]}, 0x84}}, 0x4000) splice(r2, 0x0, r5, 0x0, 0x20000000003, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f003c123f3188a070") r7 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 632.584961][T31817] ? __kmalloc_node+0x4e/0x70 [ 632.589646][T31817] __list_lru_init+0x4d9/0x850 [ 632.594417][T31817] ? list_lru_destroy+0x520/0x520 [ 632.599460][T31817] ? down_read+0x120/0x120 [ 632.603889][T31817] ? init_wait_entry+0x1c0/0x1c0 [ 632.608839][T31817] alloc_super+0x8f2/0xa10 [ 632.613271][T31817] ? destroy_unused_super.part.0+0x110/0x110 [ 632.619277][T31817] sget_userns+0x164/0x6c0 [ 632.623703][T31817] ? get_anon_bdev+0xc0/0xc0 [ 632.628304][T31817] ? vfs_get_super+0x260/0x260 10:19:58 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x6400, 0xd1) [ 632.633069][T31817] ? security_capable+0x9b/0xd0 [ 632.637933][T31817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.644177][T31817] ? ns_capable_common+0x93/0x100 [ 632.649211][T31817] ? get_anon_bdev+0xc0/0xc0 [ 632.653814][T31817] sget+0x10c/0x150 [ 632.657639][T31817] ? ovl_show_options+0x550/0x550 [ 632.662685][T31817] mount_nodev+0x31/0x110 [ 632.667022][T31817] ovl_mount+0x2d/0x40 [ 632.671090][T31817] ? ovl_own_xattr_set+0x10/0x10 [ 632.676021][T31817] legacy_get_tree+0xf2/0x200 [ 632.680681][T31817] vfs_get_tree+0x123/0x450 [ 632.685181][T31817] do_mount+0x1622/0x2fa0 [ 632.689523][T31817] ? copy_mount_string+0x40/0x40 [ 632.694474][T31817] ? kmem_cache_alloc_trace+0x354/0x760 [ 632.700026][T31817] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 632.706271][T31817] ? _copy_from_user+0xdd/0x150 [ 632.711129][T31817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 632.717393][T31817] ? copy_mount_options+0x30e/0x440 [ 632.722617][T31817] ksys_mount+0xdb/0x150 [ 632.726870][T31817] __x64_sys_mount+0xbe/0x150 [ 632.731565][T31817] do_syscall_64+0x1a3/0x800 [ 632.736268][T31817] ? syscall_return_slowpath+0x5f0/0x5f0 [ 632.741908][T31817] ? prepare_exit_to_usermode+0x232/0x3b0 [ 632.747637][T31817] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 632.753201][T31817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 632.759103][T31817] RIP: 0033:0x458099 [ 632.763001][T31817] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 10:19:58 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 10:19:58 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xedc000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 632.782613][T31817] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 632.791029][T31817] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 632.799089][T31817] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 632.807066][T31817] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 632.815042][T31817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 632.823017][T31817] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 [ 632.917109][T31844] overlayfs: './file0' not a directory 10:19:58 executing program 5 (fault-call:1 fault-nth:56): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3f00, 0x0}}, 0x20) 10:19:58 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x100000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:58 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7c707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f666905000000000000006469723d2e2f66696c65315c00"]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) [ 632.963493][T31845] overlayfs: './file0' not a directory 10:19:58 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x6800, 0xd1) [ 633.039733][T31851] overlayfs: unrecognized mount option "|pperdir=./file0" or missing value [ 633.051817][T31856] FAULT_INJECTION: forcing a failure. [ 633.051817][T31856] name failslab, interval 1, probability 0, space 0, times 0 [ 633.086707][T31856] CPU: 1 PID: 31856 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 633.089452][T31857] overlayfs: unrecognized mount option "|pperdir=./file0" or missing value [ 633.095860][T31856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.095866][T31856] Call Trace: [ 633.095890][T31856] dump_stack+0x1db/0x2d0 [ 633.095912][T31856] ? dump_stack_print_info.cold+0x20/0x20 [ 633.095927][T31856] ? add_lock_to_list.isra.0+0x450/0x450 [ 633.095949][T31856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.139719][T31856] ? check_preemption_disabled+0x48/0x290 [ 633.145451][T31856] should_fail.cold+0xa/0x14 [ 633.150067][T31856] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 633.155886][T31856] ? ___might_sleep+0x1e7/0x310 [ 633.160736][T31856] ? arch_local_save_flags+0x50/0x50 [ 633.166027][T31856] ? ida_alloc_range+0x94c/0xcf0 [ 633.170974][T31856] __should_failslab+0x121/0x190 [ 633.176064][T31856] should_failslab+0x9/0x14 [ 633.180574][T31856] kmem_cache_alloc_trace+0x2d1/0x760 [ 633.185945][T31856] ? down_write_nested+0x130/0x130 [ 633.191063][T31856] ? down_read+0x120/0x120 [ 633.195490][T31856] ovl_fill_super+0x111/0x41b5 [ 633.200266][T31856] ? register_shrinker_prepared+0x1b9/0x280 [ 633.206165][T31856] ? free_prealloced_shrinker+0x150/0x150 [ 633.211888][T31856] ? memcpy+0x46/0x50 [ 633.215877][T31856] ? sget_userns+0x178/0x6c0 [ 633.220466][T31856] ? ovl_show_options+0x550/0x550 [ 633.225492][T31856] ? vfs_get_super+0x260/0x260 [ 633.230270][T31856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.236509][T31856] ? ns_capable_common+0x93/0x100 [ 633.241559][T31856] ? get_anon_bdev+0xc0/0xc0 [ 633.246151][T31856] ? sget+0x114/0x150 [ 633.250136][T31856] ? ovl_show_options+0x550/0x550 [ 633.255165][T31856] mount_nodev+0x68/0x110 [ 633.259500][T31856] ovl_mount+0x2d/0x40 [ 633.263583][T31856] ? ovl_own_xattr_set+0x10/0x10 [ 633.268536][T31856] legacy_get_tree+0xf2/0x200 [ 633.273217][T31856] vfs_get_tree+0x123/0x450 [ 633.277734][T31856] do_mount+0x1622/0x2fa0 [ 633.282084][T31856] ? copy_mount_string+0x40/0x40 10:19:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1000000, 0x0}}, 0x20) 10:19:59 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@index_on='index=on'}, {@index_on='index=on'}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000240)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mount$9p_rdma(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x180020, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0xd74}}, {@common=@cache_fscache='cache=fscache'}, {@rq={'rq', 0x3d, 0x370}}], [{@subj_type={'subj_type', 0x3d, 'index=on'}}, {@dont_appraise='dont_appraise'}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000040)) 10:19:59 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x200000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 633.287032][T31856] ? kmem_cache_alloc_trace+0x354/0x760 [ 633.292588][T31856] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 633.298830][T31856] ? _copy_from_user+0xdd/0x150 [ 633.303683][T31856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.309929][T31856] ? copy_mount_options+0x30e/0x440 [ 633.315136][T31856] ksys_mount+0xdb/0x150 [ 633.319390][T31856] __x64_sys_mount+0xbe/0x150 [ 633.324079][T31856] do_syscall_64+0x1a3/0x800 [ 633.328676][T31856] ? syscall_return_slowpath+0x5f0/0x5f0 [ 633.334319][T31856] ? prepare_exit_to_usermode+0x232/0x3b0 [ 633.338673][T31866] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 633.340046][T31856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 633.340075][T31856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 633.340088][T31856] RIP: 0033:0x458099 [ 633.340100][T31856] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 633.340114][T31856] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 633.362815][T31866] overlayfs: missing 'lowerdir' [ 633.364540][T31856] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 633.364551][T31856] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 633.364561][T31856] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 633.364570][T31856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 633.364580][T31856] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x1f, 0x4) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xa4e9dde3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd91}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffc}]}, 0x84}}, 0x4000) splice(r2, 0x0, r5, 0x0, 0x20000000003, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f003c123f3188a070") r7 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:19:59 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x300000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2000000, 0x0}}, 0x20) [ 633.413492][T31860] overlayfs: './file0' not a directory 10:19:59 executing program 5 (fault-call:1 fault-nth:57): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 633.493158][T31870] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore 10:19:59 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x400000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:59 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x6c00, 0xd1) [ 633.539458][T31880] FAULT_INJECTION: forcing a failure. [ 633.539458][T31880] name failslab, interval 1, probability 0, space 0, times 0 [ 633.570874][T31870] overlayfs: missing 'lowerdir' 10:19:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3f000000, 0x0}}, 0x20) [ 633.597376][T31880] CPU: 0 PID: 31880 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 633.606436][T31880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.616501][T31880] Call Trace: [ 633.619802][T31880] dump_stack+0x1db/0x2d0 [ 633.624144][T31880] ? dump_stack_print_info.cold+0x20/0x20 [ 633.629876][T31880] ? __x64_sys_mount+0xbe/0x150 [ 633.634729][T31880] ? do_syscall_64+0x1a3/0x800 [ 633.639501][T31880] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 633.645580][T31880] ? print_usage_bug+0xd0/0xd0 [ 633.650358][T31880] should_fail.cold+0xa/0x14 [ 633.654960][T31880] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 633.660771][T31880] ? ___might_sleep+0x1e7/0x310 [ 633.665625][T31880] ? arch_local_save_flags+0x50/0x50 [ 633.670929][T31880] __should_failslab+0x121/0x190 [ 633.675878][T31880] should_failslab+0x9/0x14 [ 633.680386][T31880] kmem_cache_alloc_trace+0x2d1/0x760 [ 633.685800][T31880] __memcg_init_list_lru_node+0xef/0x2e0 [ 633.691442][T31880] ? kvfree_rcu+0x20/0x20 [ 633.695787][T31880] ? __kmalloc_node+0x4e/0x70 [ 633.700473][T31880] __list_lru_init+0x4d9/0x850 [ 633.705262][T31880] ? list_lru_destroy+0x520/0x520 [ 633.710293][T31880] ? down_read+0x120/0x120 [ 633.714715][T31880] ? init_wait_entry+0x1c0/0x1c0 [ 633.719665][T31880] alloc_super+0x8f2/0xa10 [ 633.724113][T31880] ? destroy_unused_super.part.0+0x110/0x110 [ 633.730118][T31880] sget_userns+0x164/0x6c0 [ 633.734553][T31880] ? get_anon_bdev+0xc0/0xc0 [ 633.739159][T31880] ? vfs_get_super+0x260/0x260 10:19:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0}}, 0x20) [ 633.743930][T31880] ? security_capable+0x9b/0xd0 [ 633.748787][T31880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.755031][T31880] ? ns_capable_common+0x93/0x100 [ 633.760064][T31880] ? get_anon_bdev+0xc0/0xc0 [ 633.764656][T31880] sget+0x10c/0x150 [ 633.768496][T31880] ? ovl_show_options+0x550/0x550 [ 633.773540][T31880] mount_nodev+0x31/0x110 [ 633.777890][T31880] ovl_mount+0x2d/0x40 [ 633.781965][T31880] ? ovl_own_xattr_set+0x10/0x10 [ 633.786909][T31880] legacy_get_tree+0xf2/0x200 [ 633.791593][T31880] vfs_get_tree+0x123/0x450 [ 633.796208][T31880] do_mount+0x1622/0x2fa0 [ 633.800667][T31880] ? copy_mount_string+0x40/0x40 [ 633.805611][T31880] ? kmem_cache_alloc_trace+0x354/0x760 [ 633.811167][T31880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 633.817418][T31880] ? copy_mount_options+0x30e/0x440 [ 633.822628][T31880] ksys_mount+0xdb/0x150 [ 633.826895][T31880] __x64_sys_mount+0xbe/0x150 [ 633.832035][T31880] do_syscall_64+0x1a3/0x800 [ 633.836634][T31880] ? syscall_return_slowpath+0x5f0/0x5f0 [ 633.842275][T31880] ? prepare_exit_to_usermode+0x232/0x3b0 [ 633.848007][T31880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 633.853583][T31880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 633.859482][T31880] RIP: 0033:0x458099 [ 633.863386][T31880] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 633.882991][T31880] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 10:19:59 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x500000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:19:59 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file0,workdIr=./file1\\\x00']) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) [ 633.891405][T31880] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 633.899380][T31880] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 633.907357][T31880] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 [ 633.915330][T31880] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 633.923302][T31880] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:19:59 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x600000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 633.988434][T31899] overlayfs: './file0' not a directory 10:19:59 executing program 5 (fault-call:1 fault-nth:58): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 634.041767][T31902] overlayfs: unrecognized mount option "workdIr=./file1\" or missing value [ 634.070032][T31903] overlayfs: unrecognized mount option "workdIr=./file1\" or missing value [ 634.138640][T31908] FAULT_INJECTION: forcing a failure. [ 634.138640][T31908] name failslab, interval 1, probability 0, space 0, times 0 [ 634.177038][T31908] CPU: 0 PID: 31908 Comm: syz-executor5 Not tainted 5.0.0-rc2-next-20190117 #14 [ 634.186107][T31908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.196168][T31908] Call Trace: [ 634.199483][T31908] dump_stack+0x1db/0x2d0 [ 634.203832][T31908] ? dump_stack_print_info.cold+0x20/0x20 [ 634.209549][T31908] ? prepare_creds+0xa4/0x510 [ 634.214325][T31908] ? ovl_fill_super+0x127/0x41b5 [ 634.219261][T31908] ? mount_nodev+0x68/0x110 [ 634.223760][T31908] ? ovl_mount+0x2d/0x40 [ 634.228004][T31908] ? legacy_get_tree+0xf2/0x200 [ 634.232866][T31908] ? do_mount+0x1622/0x2fa0 [ 634.237385][T31908] should_fail.cold+0xa/0x14 [ 634.241987][T31908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 634.247803][T31908] ? ___might_sleep+0x1e7/0x310 [ 634.252657][T31908] ? arch_local_save_flags+0x50/0x50 [ 634.258056][T31908] ? check_preemption_disabled+0x48/0x290 [ 634.263803][T31908] __should_failslab+0x121/0x190 [ 634.268734][T31908] should_failslab+0x9/0x14 [ 634.273216][T31908] __kmalloc+0x2dc/0x740 [ 634.277446][T31908] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 634.283234][T31908] ? prepare_creds+0xa4/0x510 [ 634.288027][T31908] ? prepare_creds+0xa4/0x510 [ 634.292687][T31908] ? security_prepare_creds+0x123/0x190 [ 634.298231][T31908] security_prepare_creds+0x123/0x190 [ 634.303585][T31908] prepare_creds+0x3c4/0x510 [ 634.308154][T31908] ? abort_creds+0x2c0/0x2c0 [ 634.312719][T31908] ? rcu_read_lock_sched_held+0x110/0x130 [ 634.318418][T31908] ? down_read+0x120/0x120 [ 634.322821][T31908] ovl_fill_super+0x127/0x41b5 [ 634.327564][T31908] ? register_shrinker_prepared+0x1b9/0x280 [ 634.333441][T31908] ? free_prealloced_shrinker+0x150/0x150 [ 634.339155][T31908] ? memcpy+0x46/0x50 [ 634.343123][T31908] ? sget_userns+0x178/0x6c0 [ 634.347691][T31908] ? ovl_show_options+0x550/0x550 [ 634.352785][T31908] ? vfs_get_super+0x260/0x260 [ 634.357547][T31908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.363775][T31908] ? ns_capable_common+0x93/0x100 [ 634.368781][T31908] ? get_anon_bdev+0xc0/0xc0 [ 634.373348][T31908] ? sget+0x114/0x150 [ 634.377307][T31908] ? ovl_show_options+0x550/0x550 [ 634.382308][T31908] mount_nodev+0x68/0x110 [ 634.386629][T31908] ovl_mount+0x2d/0x40 [ 634.390676][T31908] ? ovl_own_xattr_set+0x10/0x10 [ 634.395592][T31908] legacy_get_tree+0xf2/0x200 [ 634.400248][T31908] vfs_get_tree+0x123/0x450 [ 634.404730][T31908] do_mount+0x1622/0x2fa0 [ 634.409049][T31908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 634.414487][T31908] ? copy_mount_string+0x40/0x40 [ 634.419408][T31908] ? copy_mount_options+0x1de/0x440 [ 634.424615][T31908] ? __sanitizer_cov_trace_pc+0x3f/0x50 [ 634.430150][T31908] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.436498][T31908] ? copy_mount_options+0x30e/0x440 [ 634.441691][T31908] ksys_mount+0xdb/0x150 [ 634.445912][T31908] __x64_sys_mount+0xbe/0x150 [ 634.450569][T31908] do_syscall_64+0x1a3/0x800 [ 634.455137][T31908] ? syscall_return_slowpath+0x5f0/0x5f0 [ 634.460749][T31908] ? prepare_exit_to_usermode+0x232/0x3b0 [ 634.466461][T31908] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 634.471988][T31908] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 634.477855][T31908] RIP: 0033:0x458099 [ 634.481727][T31908] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 634.501433][T31908] RSP: 002b:00007f4d7e7d8c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 634.509823][T31908] RAX: ffffffffffffffda RBX: 00007f4d7e7d8c90 RCX: 0000000000458099 [ 634.517781][T31908] RDX: 0000000020000200 RSI: 0000000020000000 RDI: 0000000000400000 [ 634.525744][T31908] RBP: 000000000073bf00 R08: 0000000020000100 R09: 0000000000000000 10:20:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040)=0x1f, 0x4) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xa4e9dde3) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, r6, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34}}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xd91}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffc}]}, 0x84}}, 0x4000) splice(r2, 0x0, r5, 0x0, 0x20000000003, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f003c123f3188a070") r7 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 10:20:00 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x7000, 0xd1) 10:20:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0x20) 10:20:00 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x700000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:20:00 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) getgid() mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r0, 0x0, 0x0) [ 634.533694][T31908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d7e7d96d4 [ 634.541641][T31908] R13: 00000000004c3e6c R14: 00000000004d6e98 R15: 0000000000000003 10:20:00 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x800000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 634.584638][ C0] ------------[ cut here ]------------ [ 634.590608][ C0] AppArmor WARN cred_label: ((!blob)): [ 634.590870][ C0] WARNING: CPU: 0 PID: 31912 at security/apparmor/include/cred.h:30 apparmor_cred_free+0x12f/0x1a0 [ 634.607081][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 634.613670][ C0] CPU: 0 PID: 31912 Comm: syz-executor3 Not tainted 5.0.0-rc2-next-20190117 #14 [ 634.622684][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 10:20:00 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x900000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 634.632737][ C0] Call Trace: [ 634.636018][ C0] [ 634.638882][ C0] dump_stack+0x1db/0x2d0 [ 634.643220][ C0] ? dump_stack_print_info.cold+0x20/0x20 [ 634.648949][ C0] ? apparmor_cred_free+0x70/0x1a0 [ 634.654063][ C0] panic+0x2cb/0x65c [ 634.657958][ C0] ? add_taint.cold+0x16/0x16 [ 634.662635][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 634.667843][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.674079][ C0] ? __probe_kernel_read+0x1f4/0x250 [ 634.679364][ C0] ? __warn.cold+0x5/0x48 10:20:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x200000000000000, 0x0}}, 0x20) [ 634.683703][ C0] ? __warn+0xe8/0x1d0 [ 634.687788][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 634.692987][ C0] __warn.cold+0x20/0x48 [ 634.697227][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 634.702440][ C0] report_bug+0x263/0x2b0 [ 634.706775][ C0] do_error_trap+0x11b/0x200 [ 634.711371][ C0] do_invalid_op+0x37/0x50 [ 634.715795][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 634.720993][ C0] invalid_op+0x14/0x20 [ 634.725152][ C0] RIP: 0010:apparmor_cred_free+0x12f/0x1a0 [ 634.730963][ C0] Code: 7c 88 48 c7 c7 80 d2 7c 88 e8 9d 69 f2 fd 0f 0b eb a9 e8 a4 40 29 fe 48 c7 c6 40 e2 7c 88 48 c7 c7 80 d2 7c 88 e8 81 69 f2 fd <0f> 0b 48 b8 00 00 00 00 00 fc ff df 80 38 00 75 4a 4c 8b 2c 25 00 [ 634.750580][ C0] RSP: 0018:ffff8880ae6079f8 EFLAGS: 00010286 [ 634.756649][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 634.757002][T31923] overlayfs: './file0' not a directory [ 634.764616][ C0] RDX: 0000000000000100 RSI: ffffffff81688726 RDI: 0000000000000006 10:20:00 executing program 5 (fault-call:1 fault-nth:59): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 10:20:00 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0xa00000000000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) [ 634.764627][ C0] RBP: ffff8880ae607a18 R08: ffff88808ef74300 R09: ffff88808ef74bc8 [ 634.764634][ C0] R10: ffff88808ef74300 R11: 0000000000000000 R12: ffff88808a07e600 [ 634.764642][ C0] R13: ffff88808a07e600 R14: ffff88808a07e688 R15: dffffc0000000000 [ 634.764671][ C0] ? vprintk_func+0x86/0x189 [ 634.764691][ C0] ? apparmor_cred_free+0x12f/0x1a0 [ 634.764708][ C0] security_cred_free+0x4b/0xf0 [ 634.764724][ C0] put_cred_rcu+0x21f/0x6e0 [ 634.764745][ C0] ? get_task_cred+0x5e0/0x5e0 [ 634.786683][ T3865] kobject: 'loop5' (000000002e774e64): kobject_uevent_env 10:20:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3f00000000000000, 0x0}}, 0x20) [ 634.794167][ C0] ? lock_release+0xc40/0xc40 [ 634.837798][ C0] ? file_free_rcu+0x98/0xe0 [ 634.842401][ C0] ? kmem_cache_free+0x225/0x260 [ 634.847351][ C0] rcu_core+0xc4a/0x1680 [ 634.851613][ C0] ? rcu_fwd_progress_check+0xd0/0xd0 [ 634.856985][ C0] ? clockevents_program_event+0x15f/0x380 [ 634.862883][ C0] ? add_lock_to_list.isra.0+0x450/0x450 [ 634.868522][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.871739][ T3865] kobject: 'loop5' (000000002e774e64): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:20:00 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="005c0f"], 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000140)=0x7400, 0xd1) [ 634.874760][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.874778][ C0] ? check_preemption_disabled+0x48/0x290 [ 634.874801][ C0] ? __lock_is_held+0xb6/0x140 [ 634.874826][ C0] __do_softirq+0x30b/0xb11 [ 634.874850][ C0] ? __irqentry_text_end+0x1f96d2/0x1f96d2 [ 634.874871][ C0] ? kvm_clock_read+0x18/0x30 [ 634.874886][ C0] ? kvm_sched_clock_read+0x9/0x20 [ 634.874898][ C0] ? sched_clock+0x2e/0x50 [ 634.874929][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 634.932394][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 634.938646][ C0] ? check_preemption_disabled+0x48/0x290 [ 634.944461][ C0] irq_exit+0x180/0x1d0 [ 634.948623][ C0] smp_apic_timer_interrupt+0x1b7/0x760 [ 634.954178][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 634.958594][T31917] overlayfs: filesystem on './file0' not supported as upperdir [ 634.959739][ C0] ? smp_call_function_single_interrupt+0x640/0x640 [ 634.973836][ C0] ? trace_hardirqs_off+0x310/0x310 [ 634.979035][ C0] ? task_prio+0x50/0x50 [ 634.983283][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 634.989528][ C0] ? check_preemption_disabled+0x48/0x290 [ 634.995346][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 635.000907][ C0] apic_timer_interrupt+0xf/0x20 [ 635.005839][ C0] [ 635.008785][ C0] RIP: 0010:lock_is_held_type+0x17e/0x210 [ 635.014504][ C0] Code: 00 00 00 fc ff df 41 c7 85 7c 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 75 63 48 83 3d c9 ef 2e 08 00 74 30 48 89 df 57 9d <0f> 1f 44 00 00 48 83 c4 08 44 89 e0 5b 41 5c 41 5d 5d c3 48 83 c4 [ 635.034194][ C0] RSP: 0018:ffff88804e367728 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff13 [ 635.042611][ C0] RAX: 1ffffffff132507e RBX: 0000000000000282 RCX: dffffc0000000000 [ 635.050606][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 635.058577][ C0] RBP: ffff88804e367748 R08: ffff88821a00d690 R09: ffffed101328c159 [ 635.066549][ C0] R10: ffffed101328c158 R11: ffff888099460ac3 R12: 0000000000000000 [ 635.070945][T31938] overlayfs: './file0' not a directory [ 635.074515][ C0] R13: ffff88808ef74300 R14: 0000000000000108 R15: 1ffff11009c6cf3f [ 635.074559][ C0] ___might_sleep+0x248/0x310 [ 635.092628][ C0] ? arch_local_save_flags+0x50/0x50 [ 635.097915][ C0] __might_sleep+0x95/0x190 [ 635.102418][ C0] ? do_raw_spin_trylock+0x270/0x270 [ 635.107712][ C0] __ext4_handle_dirty_metadata+0x39/0x570 [ 635.113542][ C0] __ext4_new_inode+0x268f/0x6eb0 [ 635.118597][ C0] ? ext4_free_inode+0x1a30/0x1a30 [ 635.123725][ C0] ? save_stack+0xa9/0xd0 [ 635.128056][ C0] ? save_stack+0x45/0xd0 [ 635.132395][ C0] ? __kasan_slab_free+0x102/0x150 [ 635.137507][ C0] ? kasan_slab_free+0xe/0x10 [ 635.142172][ C0] ? kmem_cache_free+0x86/0x260 [ 635.147007][ C0] ? putname+0xef/0x130 [ 635.151150][ C0] ? filename_create+0x29d/0x5a0 [ 635.156074][ C0] ? do_symlinkat+0xf3/0x2c0 [ 635.160660][ C0] ? do_syscall_64+0x1a3/0x800 [ 635.165421][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.171478][ C0] ? print_usage_bug+0xd0/0xd0 [ 635.176226][ C0] ? do_raw_spin_unlock+0xa0/0x330 [ 635.181327][ C0] ? do_raw_spin_trylock+0x270/0x270 [ 635.186602][ C0] ? d_instantiate_anon+0x30/0x30 [ 635.191706][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.197924][ C0] ? __dquot_initialize+0x632/0xda0 [ 635.203109][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.209336][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.215589][ C0] ? dquot_get_next_dqblk+0x180/0x180 [ 635.220970][ C0] ? __lock_is_held+0xb6/0x140 [ 635.225722][ C0] ? putname+0xef/0x130 [ 635.229875][ C0] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 635.235593][ C0] ext4_symlink+0x4a9/0x1110 [ 635.240180][ C0] ? ext4_orphan_del+0xe10/0xe10 [ 635.245110][ C0] ? security_inode_permission+0xd5/0x110 [ 635.250826][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 635.257056][ C0] ? security_inode_symlink+0xe1/0x120 [ 635.262495][ C0] vfs_symlink+0x378/0x5d0 [ 635.266930][ C0] do_symlinkat+0x239/0x2c0 [ 635.271441][ C0] ? __ia32_sys_unlink+0x50/0x50 [ 635.276391][ C0] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.282437][ C0] ? trace_hardirqs_off_caller+0x300/0x300 [ 635.288231][ C0] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 635.293679][ C0] __x64_sys_symlink+0x59/0x80 [ 635.298437][ C0] do_syscall_64+0x1a3/0x800 [ 635.303021][ C0] ? syscall_return_slowpath+0x5f0/0x5f0 [ 635.308643][ C0] ? prepare_exit_to_usermode+0x232/0x3b0 [ 635.314461][ C0] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 635.320006][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.325895][ C0] RIP: 0033:0x457dc7 [ 635.329789][ C0] Code: 0f 1f 00 b8 5c 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 635.349393][ C0] RSP: 002b:00007ffda0ff9078 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 635.357796][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457dc7 [ 635.365756][ C0] RDX: 00007ffda0ff90f7 RSI: 00000000004bd896 RDI: 00007ffda0ff90e0 [ 635.373719][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000017 [ 635.381675][ C0] R10: 0000000000000075 R11: 0000000000000206 R12: 0000000000000000 [ 635.389643][ C0] R13: 0000000000000001 R14: 00000000000003e3 R15: 0000000000000003 [ 635.398938][ C0] Kernel Offset: disabled [ 635.403417][ C0] Rebooting in 86400 seconds..