10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
sendmmsg(r5, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="41ce909c684be704ff76e26347ce17aebc3e683f77e22693308ce49512964a040acc8da198ab2ec27f882d397d5eb6cb2b6ed03d533ddc46eabceb8229b6b611293976a2125c8192b12130aa610e96b3c9f58474b2bf1c725220798cad0eb976bc0b98c3792bc64f6ea973620606099db31489399d73b20765fb3c40c8418eeca117dfefc9b3adb5848748fbe4d3c3ff9d5c0e36e323461682f60da0450fe8fa5c7dbf6722795d1c967d441f17fd08158fcb6ffa31334f102b", 0xb9}, {&(0x7f0000000600)="33a38b74340abdbceed9647ac0416af528b9de36a4f0863683f12ce9d280d1406f47747b7d18e74a1b27056531fd41c734996023115aae4ff9851d10f8f1dd77320e2f3084de0bd34b", 0x49}, {&(0x7f0000000680)="208cc70b58dbec27771f5ef5ebccd4121ef8b6901ed9918c6f92265a1ee7b8e4", 0x20}, {&(0x7f00000006c0)="de9bec2d24a11b8090743ea431d10c2103b0b7a4423433a6179a18599f46f6f956c6eae9c0e71ec261407426274ea47716cddf49e9826af7f3824bab4f2bff504d3772b000d03f5d6af75eaeddf6ae48765b40144e4dd8e94ea16d061d738156483aa2477a5f6fe55e98bab6c6e7b77dc6c3ec1012bf4c296f85b46fd0adddda061a1fe404b02029618e5341c82dee87c33f8434187cb62bb0da8798290e4141ed79a2d3ce100bc4148974fe029a13cbae4d3c6b58c4aed8fedfba6f98e86a6f", 0xc0}], 0x4}}, {{&(0x7f00000007c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0xea, 0x2, "89a5390906d069b662d932393c3d79606c4f56c0dc07f8cabf87807e3cce1442f62c619a8c90c44f84e757c11de5c9e0334ba1359510b70b4947c82768fd33", 0xd}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000940)="e77225a32a8e77bb2aad2879259e3108bfe5e58e0628eaaa6fd5a8dfdcdc0f9463e48176bbcd5ee0f61625202d6623e8c5d5110b40bd1e163d8b7eb4f1da5e0480fff1b370b4d612f7ba194c67e81762ded4599fd90744c1dc2ea127c1f027698814d496a00f49e4a28d55a3b071a0518ec94921e72c05efc9248c8ffd244a82092e078e74e5f0fb8dc836298389e30faf82103b08b4d3e4bb2126d1f18ff60ab5fc47ae098e45b7c632e25a9ea240fadcec88ecf99bac6b35c2abee02183b1abb32ba909e0a476228e26b4b29f7cdcf5bf31a741d50f385d9b208f1cb4b90c8f0c5", 0xe2}, {&(0x7f0000000840)="5bde777dc292f6f54cc6af8c5b7d08db3be29b9abab321affd26befb36972eb8e95f6181954b0f08fb0fad3bc35f4c1a4aed6da6f7813a971d54c126987671fe984f45c9568e8d956a9cee304f11a617d64dee5534ba57f13a8827987d7a5440746335b055e51dfae7d3b5ca6ae8b19b8f7637536ce0419b0b602e2fbe1e422244ff374327daf153c14174a1fac5d567df", 0x91}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="268a779b63dbcf3f46962044029f5610e1eb8c756d4f097cf9d06e8b05397e1170f430dd00c73a2a648d983f9dd0d774120ca7d5ae294142949b5703b48239e475c837ae16e90bd8368ffd400a831f16cd75b030295b28b66425fb7d0159c254ead52bdfccf6170818b3bd60b667702d3086470dfd7b5a1a6c9ad6f0f0c233fb8c947a47bd9fb108d9004d644e74", 0x8e}, {&(0x7f0000001b00)="1beddce69dd0dc8040a2d5edf64c8f040e", 0x11}, {&(0x7f0000001b40)="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", 0x1000}], 0x6, &(0x7f0000002bc0)=[{0x78, 0x114, 0xffff, "3dd43bd3b63ac8ec28a8454f8c61696e02a81bc3fb4ba509aba5fde2e9f2c9af3de9627ad7e79b8222777b83e329c0a5c2294d91f91bb38ff8cda52f2627ba73a0f45961f78fb2b3af20d9ee1a56aaec455c5f68790c3113d05dc791add7136a16"}, {0x60, 0x10c, 0x0, "7631410ea99fccae2e324ca105c8c61febf8a5ba7b654af6ba2168d477a531d51de2b1404acd36170fdb446cedfe5afe00baa7eee9786103e07c826bafbcb141fd4b1ce3b5629ab49e0b88ea95"}, {0x30, 0x6, 0x4, "989e97f761e986f9b1828c0104f5edaed3dbf6d08637a8396a5c"}, {0x18, 0x113, 0x4, "b506ecbc0ebffa0e"}, {0x78, 0x111, 0x8, "b8b8fe5bcc1dbc66f8fd9d8f2528ac461aafd0438e7cc1002f00e022c14c50e4fbfb469cbb177a19e23a55ff6335cd4e9b546a6f051163efd4d7e28fa71ea470ea1013248c79c33a54e7b81bd4069ca3cb2efa29cc61c8740fef46a6d1d49800d8"}, {0x110, 0x101, 0xff, "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"}], 0x2a8}}, {{&(0x7f0000002e80)=@isdn={0x22, 0x4, 0x73, 0xff, 0x9}, 0x80, &(0x7f0000005000)=[{&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="61b7f732ac5cc93cee0de4feac1c70d776a1a9b4500f072d8bb49dcbf0462b836779ee5a1cd0233edba2e3d43e1561153f859282aa212c7909fd3ee9e3e985e6f09df11e58d23b455d351860c4678b3b7196ddb1fb4278a390cff81e318c7d13355952affc9fef716e92fdb31e517463deb987ca80cd643b7c026bde10e0617bd0188deb39d139e194587ee1f38a63a9e3bd6177a22fd61fce54b09af5926c392b94c5a951c1cad981c61adaf82eb975c95a5b81250a808b09666eb9de658138e44c096fafd391536ce19e1c3bedcea9", 0xd0}], 0x3, &(0x7f0000005040)=[{0xe8, 0x110, 0xbe8, "155acc7d04282398dfeff3bd543f9f840b844ca5740023f695a1b434dc8339918a96c01162b0a402b65834ed39941b0b90397044b7e988a8c0190efc032bb87effa13da26274e03acc11a56ba16e1d85eb348d847ed996d9d65844cda9bcc794cbd6449d2efa4c6bebc75680a3664f368d0d32dc5011a66c61d5daa3964687bba1454808470ea49064e33ee249bfc8dcb9ea82279d5703239f6559ba841ca7cce4fa3372c5161373ed278846aca9825c9606fc71841552de3dbdc554ef3d2c991bd1e9e6b5a7c342b7aac3e0af7eb70a1830645be1"}, {0x88, 0x117, 0x0, "e38ccca706d66f53ae2c4865731c7371bcb57e2d2c3cc0f975a8f7b640fa574dadeb2cba9b782d52a7fa1eab4dbf9c13cb5c2bf8787f7a66161ef26d47c2cd4f6e306da956c095f0a45937f53895b493890556023d6f395121588ffc194982d583a3d00c05a54db7987cd7495ce7751771"}, {0x88, 0x88, 0x80000001, "c233d386144fea99e342c3c6e83a5855985bc4fac54d5361b420a0596102b32ef09537b0ed8540df381a4d947a46d387bf071efd5d4af999174f3c304402af2e2974422f56a7459ff7c095dec6833a97cfe632e652777cdd93f18f1c712c116c2f329073f987245443bf5bb013551d89bb7a789e30f9"}, {0x108, 0xff, 0x2, "6d2d91ec636ae061fbd01f64de170e70b4cfd5509d139727d43aaad0b1982775547eef42d4436a67fe76a18ece27d9aacb5d00316b4da45cca4e4c20fbaab8a1df2bd63e6021d44a3a4a54e7dd38cd66757c4319c98beecf614021fa0bc8f0d39e16ec77d60fc6b211018dbe02f7ab3807182b8e27d8f2ee00bd271ae85590a9f2d64b2dcc907c5e1094a29538ab11fcb561b8df0a60f45f99063959679c6e35d8d1ec4f91865fb612592356b195efedc20ba0c7ea5dcaf8c8c1c20eae8843d7b377851e9f9bed5c0df78a0942ea6d509d46fa2e64e32bc3798e9a6c370a51e454977afdbd9615aad8e05d7ae3c8adb4d27e681d80"}, {0x10, 0x113, 0x5a36}, {0x48, 0x10d, 0x8, "509112b4360a4ad6e6917db8fff4bfc938d2938d5b9bb94ad1865c3de8ae98f73aded31fd6da8548d1b4ee7d5154df4b947bc8e7f7f71c"}, {0x78, 0x108, 0xffff, "1f9636ee6fc47db5f930966e432f9b27d8e760d0e57092c43eb5ef4d42703b0d4610d3a2f6043c03720a7635b5b938a68f55c617bae1746a1b5264213993a2504606a2a858c409fcd977aac087a6f3d3ca05d0e84db4b7b5f48aab93905dd503e96b5bf2a594c4cf"}, {0xa8, 0x88, 0x4, "f7636f4580593fe5f7e52a4dcbe94a1cf9835e66c241425cea612f8470cd0e7e4f7d0f063d5482a68f5fe93f1992404a11f8c9cb783abf7c97f69e49092f56a3c10a9c8fb47ea6035a76b8bbee409364dd11181b30fd03b1e67ebb86f76560f21c86893e4edeba4203d0a179bf42ed30c7ae1a4ecd041fc409a60d05af49d30d6d26f7aed8026835691e374260952815863a5d884de3a2b3"}], 0x478}}], 0x3, 0x8000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000380)={r1})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:42 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xc8}}, 0x0)

15:05:42 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  262.719559] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:42 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  262.775209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  262.817544] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  262.841983] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
15:05:42 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xc8}}, 0x0)

[  262.879212] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:42 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  262.922559] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  262.927512] IPv6: ADDRCONF(NETDEV_UP): veth11: link is not ready
15:05:42 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:43 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
sendmmsg(r5, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="41ce909c684be704ff76e26347ce17aebc3e683f77e22693308ce49512964a040acc8da198ab2ec27f882d397d5eb6cb2b6ed03d533ddc46eabceb8229b6b611293976a2125c8192b12130aa610e96b3c9f58474b2bf1c725220798cad0eb976bc0b98c3792bc64f6ea973620606099db31489399d73b20765fb3c40c8418eeca117dfefc9b3adb5848748fbe4d3c3ff9d5c0e36e323461682f60da0450fe8fa5c7dbf6722795d1c967d441f17fd08158fcb6ffa31334f102b", 0xb9}, {&(0x7f0000000600)="33a38b74340abdbceed9647ac0416af528b9de36a4f0863683f12ce9d280d1406f47747b7d18e74a1b27056531fd41c734996023115aae4ff9851d10f8f1dd77320e2f3084de0bd34b", 0x49}, {&(0x7f0000000680)="208cc70b58dbec27771f5ef5ebccd4121ef8b6901ed9918c6f92265a1ee7b8e4", 0x20}, {&(0x7f00000006c0)="de9bec2d24a11b8090743ea431d10c2103b0b7a4423433a6179a18599f46f6f956c6eae9c0e71ec261407426274ea47716cddf49e9826af7f3824bab4f2bff504d3772b000d03f5d6af75eaeddf6ae48765b40144e4dd8e94ea16d061d738156483aa2477a5f6fe55e98bab6c6e7b77dc6c3ec1012bf4c296f85b46fd0adddda061a1fe404b02029618e5341c82dee87c33f8434187cb62bb0da8798290e4141ed79a2d3ce100bc4148974fe029a13cbae4d3c6b58c4aed8fedfba6f98e86a6f", 0xc0}], 0x4}}, {{&(0x7f00000007c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0xea, 0x2, "89a5390906d069b662d932393c3d79606c4f56c0dc07f8cabf87807e3cce1442f62c619a8c90c44f84e757c11de5c9e0334ba1359510b70b4947c82768fd33", 0xd}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000940)="e77225a32a8e77bb2aad2879259e3108bfe5e58e0628eaaa6fd5a8dfdcdc0f9463e48176bbcd5ee0f61625202d6623e8c5d5110b40bd1e163d8b7eb4f1da5e0480fff1b370b4d612f7ba194c67e81762ded4599fd90744c1dc2ea127c1f027698814d496a00f49e4a28d55a3b071a0518ec94921e72c05efc9248c8ffd244a82092e078e74e5f0fb8dc836298389e30faf82103b08b4d3e4bb2126d1f18ff60ab5fc47ae098e45b7c632e25a9ea240fadcec88ecf99bac6b35c2abee02183b1abb32ba909e0a476228e26b4b29f7cdcf5bf31a741d50f385d9b208f1cb4b90c8f0c5", 0xe2}, {&(0x7f0000000840)="5bde777dc292f6f54cc6af8c5b7d08db3be29b9abab321affd26befb36972eb8e95f6181954b0f08fb0fad3bc35f4c1a4aed6da6f7813a971d54c126987671fe984f45c9568e8d956a9cee304f11a617d64dee5534ba57f13a8827987d7a5440746335b055e51dfae7d3b5ca6ae8b19b8f7637536ce0419b0b602e2fbe1e422244ff374327daf153c14174a1fac5d567df", 0x91}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="268a779b63dbcf3f46962044029f5610e1eb8c756d4f097cf9d06e8b05397e1170f430dd00c73a2a648d983f9dd0d774120ca7d5ae294142949b5703b48239e475c837ae16e90bd8368ffd400a831f16cd75b030295b28b66425fb7d0159c254ead52bdfccf6170818b3bd60b667702d3086470dfd7b5a1a6c9ad6f0f0c233fb8c947a47bd9fb108d9004d644e74", 0x8e}, {&(0x7f0000001b00)="1beddce69dd0dc8040a2d5edf64c8f040e", 0x11}, {&(0x7f0000001b40)="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", 0x1000}], 0x6, &(0x7f0000002bc0)=[{0x78, 0x114, 0xffff, "3dd43bd3b63ac8ec28a8454f8c61696e02a81bc3fb4ba509aba5fde2e9f2c9af3de9627ad7e79b8222777b83e329c0a5c2294d91f91bb38ff8cda52f2627ba73a0f45961f78fb2b3af20d9ee1a56aaec455c5f68790c3113d05dc791add7136a16"}, {0x60, 0x10c, 0x0, "7631410ea99fccae2e324ca105c8c61febf8a5ba7b654af6ba2168d477a531d51de2b1404acd36170fdb446cedfe5afe00baa7eee9786103e07c826bafbcb141fd4b1ce3b5629ab49e0b88ea95"}, {0x30, 0x6, 0x4, "989e97f761e986f9b1828c0104f5edaed3dbf6d08637a8396a5c"}, {0x18, 0x113, 0x4, "b506ecbc0ebffa0e"}, {0x78, 0x111, 0x8, "b8b8fe5bcc1dbc66f8fd9d8f2528ac461aafd0438e7cc1002f00e022c14c50e4fbfb469cbb177a19e23a55ff6335cd4e9b546a6f051163efd4d7e28fa71ea470ea1013248c79c33a54e7b81bd4069ca3cb2efa29cc61c8740fef46a6d1d49800d8"}, {0x110, 0x101, 0xff, "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"}], 0x2a8}}, {{&(0x7f0000002e80)=@isdn={0x22, 0x4, 0x73, 0xff, 0x9}, 0x80, &(0x7f0000005000)=[{&(0x7f0000002f00)="84d2099350dc7fdedc30680eb2df5efc5e8a068cd81adc043609e5447b48205f12399fdc1e828b17cd8db085cd69dc24abae1361f45b7044014844e3928b8fbe9923a2d002a20d3548daf579f7b8c4cf4de1f867d30788837e7d502942e985f9a12f91e0fa5242a7e545f305823a942a187d74f68c263cfec848d935050ded7fad788ffccc4f12191c06f99a248ad134b191adb2c65112c62d344395cf4bacbddd358309678aeb2b098b28d89befc777552eba81eb2cf9b30e753aaf143f19abfad8984b4b585925ace75d5cfa5188d4c71e6bcd3f5cf68ad01d7c6dab5622f897f52cff717acea0f96fb175a75dc8af60f306286e8448327fbcbceebbadd8faa34056592c26b019f101f500ac6141867d58aaec22f7fa244fc6417c333f592137b272bea7ac2078a80138e06d47aae8d42229e582f0562417a62fe4a3ed58f57fbcae9361f1b8653440c28914576025dfcaf8a76946fc1c27db0af1ae33718cac8c27192724ae999b1cc87221e7891ea425ed1cdd5f6c20369124428bfbf9fde11a08565b9f14b4e5e448b8edb03cfaf36e43514c7b9c2ace4786801ce42e13616b3682eea9cac750378b35750f717604c774b4e339f88bec3aef80bb86bd77b634ac05797d084332447b8df5a40218daf3c46bdbfac5a26d050e9c104a4db8e8c546b1571bf4d8b66b8a81fef1dbdc6008bd1ff23b9ad2cf2088143b1abd09bb0f023c519b5a1633c4741360411d90131a1975aa9dccabb93e3c4c7a35391328a208fbf0306760e7be17ca816e7056519893c6649b60757a4d65072b5ba76eee1c6eebe1648a17e5bfc421a52477b51083e9720ead941e06cb7e1db937e5e4f7e85e4983e824d84c90eabdd10c2fcf16b218ff340429e4a3816043bb41479c5743020c9e69763aade616f1ab6820a5acf47bfcb2cbe316fd29c8da447d6fd61d963e46f35ab1e404c3c17e38e1b47cf45ad2098a772c4945a161cd1ffa0813a695a86f0726e0ded1df4072bb4fb0d6f42b2b382cb57cd18b0c7a809ae223b0916af091baee14e2a967a03226e27fff4995780d036ae2220dfa0059ccaaafb911e41224aade66a45df8f82404039212387590ed694b4e688c6d73885279ec1769ab6565ce03c27992179a369e030a013194704757e7ba377e632cc321a467084c7d970441333b5ae42cc20d65f30a0861f545dc702a960ad4a2ae7fce7e1e1af667dc1699bfc68520fccb2b7ffabe633da2d580417e0d749f8d0c1dfc2a2e66818871bfac557dd2e5db61ce8b652a1bbe802985fcf58d8de0ddcbbade035d9f625b88ddee6a311857bfb3dd31a5a24ea1163da88cef76d8c00eb56fb1a96d60081b74fa2e3810c8650d1483b4a818ad3993b285ce74461770f521cc6db54d92f0fd8186d8416961b5d3c56831d7dc171ed4bb3d0c5718e22a30e7bc1755f5e16b801767b6ce323259982f76693e21b3808698f65ea36a53de4d79b3aac27a4847e47b096b728f81ad07fa682d5592c70b2d16415f93a6307ea1b3ab81ebbbf2c77845c8624bc071a208e52ab4fd80c811099d8a3fdc050b7a6c41fe2823fdc51764319778ca40c9ce48b60ec1eb0e31340fdc86b3656a80c45c484660b80de606459dc6b1a8dff433b6588e8c6d817fff144fd65a0dcaf8204be38c2a33d419372c6c0ae9870d724da5fe70de56b96e224cce968a828938e4d5dd6c14178a9a37ff5fc191b1c8c369aacb867ce1798413201ba8ff581cb349c651cfc5fb4470f13b9f51ee45aef4fe86e6cd348d5afa876bf93352bc57678a7eae09e6a0aef9ad5d1aae97bd3c1da6ebae1f9dcbd1e93b3d89a1dee31777d4bb664e707152c74928f5a01c3f823b331fbf34035b986e73721da7bfe7431a8e2887954a51052331fcbed02f74764f971ed3da8d00eb058840864933446dce6ba362b1d563b691ac242e4869a580620373904501ba35353ba8529be2c633cd3641d00888ae0377dd9a75aa8a76defd975f92e6496bba3f7a778df4ad6bdf5d585f797a32f375cdfd971990099668ae24e259487f343c350e7c09dc357f91e115fc25cceefc70afd5ff6267565007a934b0005d67d27ac83d0c80a0409e26675176c8c8b1aa47fa0c85e0c8fe7c2a028eaa94dc35ef1603f01ac09b467bd38fd1c940c5d1912dbc560f49e79e83d5ae263e5be0af89ee500feb05a79d0e96fc2c5b5a60c90b2cd905af37b8d9eeac7c85e83e1af7891f8b5afbadc4146256f23155eb2dea51ed896bf5f8f6e82948f9ee5390b86d266824f8ec39cb284856a07f7edbeb2f82e156859fa73d176577c7679b19cbf0f6173718451a8cebd4f85fb07d263b087b037d1ab7b2bd0d7148e0d431a9fe5e1b750fa5f3dbd43e31a65d9e4b0a14d2055e81b8c03fef406ddc82653d892e78b2bb87d79a22586d0fa1e21a65e0816c7cfa539a3f1481a776495f29cb0be6b8fd2ea5bfb18616ccc0d0cb057df6611574b9800ddbd232481f92591eaa0455353329470f5c5c3bd5c8744b4e7137be1009084e305d25a92353ee2134d03a1f1b8aff500824a6d36a27bcb98404ab70f7392425506ead965865d1ffa7f8e1d641428f40f920573610f6a2f543d6b703153cf911c6f94c9b09c356557817221fba444b74f565294bb23f90d3779d5d77591b201681129ad1886465fc8b2e9e79b7006c1c940e4185212edd4b82cdea8a3c42be605f0ee537cc6d102b7e6fb22a96a1e976ef385e71a4508cd6095bc6f44f643fa60b64c40b48b4813e7b72269814be0ae6c13e097334ae3b4825c7ef5f912e4468ab06e38cfeed72a456ababe23ba1b236fbecdbf648da4380a1fad49494bb750c3f345c118dabbe682a986340cdd0b433f89bd07f9d277debb897243749ab0126de28ed66d13d76982da7bab6f34c3f16ca393a5b29b535031d599c291c8b3ad54f6b8bfc2471d0f0698561124371016131d10eed347fcd237670c09380893c9bc5dae955b33bf830a0d8b3ecf32c3fea2b87959317dc52281fb9dcf3b1e800a1843e4dc7ce87eeb611d27d0c00476c2f0286ba38df1e609258e58e6884e3da71ccccc71b74cdab6233c1e7e1135ccd185c0dd2fa99235f41816a9c9c7b842a556ce82e479aec497b2a9a14331ab8883793452fed539f5501bd575d561bf6158f86697c21d8ac75a2e43f92df55a8655dadc693ce60f64d22227de6b35d3e1ecdedada9e96891bb17b14af832af09ca1bff1b099b4234095cb435ac36452c526df4378a10ed7aaae32841c69cea0532d8c100805a75722091fd0e282633ee9fd956dfbbe1d173155ecf284055274b31fa87d58158bcf43dd66e60e77786fcf20f3c0403570dc7d8ebcd7bc5f5c6aad04cf82215bf1e278647a2d796c3f6fb7a6f475130b9e705fe87f85ad8f77eb13809c52a11b7ef8a4073bbbd427446256dbc9eaf1c139eb11e088a3abcd0aa1323d4922403d71116c3ee38eac5fd1d0d6d9412a8a9dbbdf078d858a38a57e0c7f920ba9533e1872ac0c11887116e4f3bcf094a2e16b751b99ce02f5bd015568813a99ec7ef9d4fb6f7f86fcec9cf221309c56b93fd5f3c7022cc92d4a77d5547b50e064c1f4d39f468c473783e4896eeb0d67fc4265250c47284cfdacec1f4501213abfdabbfbe29c3cfaa18a058cb2e6ddedea48d7e48e817763da9f064c8e6249bc531d503bb15f3b659a3bdd4119c57712ee3e70f047b5d676fd1a0b5473b2feaaa0c84a17f8bb29083f2b20ea0c7d1af74e588e6fc95c0b4ee5c8e8a0f351145a981ac5a6e1c091be19583f483b986877451263528bf7baaf91ccf86e647869f8dad9d50926cd594784bcd3d59e7afe9ae7c7ab6130a4763c6ebd7b8295df7991ba73cc0b81019979135973b3fe1687d5f075d026876e1d293959412b5bb6bd18f0466f6d6b24bf4c6bec354f830f9df7565e3636afb182bba57b0dc2bf02c65d33d8d97829cb1a3372f702301809d22f73593b93a836f925e88ab59001f26431bafb179f2a5c52fdc2d30e9b809e0987c281e846b34cba70e3df8f601318b1ba47173ed75960a39f3245c4ea3e7b412496f1a3d94762ca50151d56cdedcb7578c387e29430dd8129d1b08e6e199a82322351d711b296edbd2498f9c13d3a092b0f440fe581d26bec31783c279af0f682464637ecd847ad84421ebab3fb5b30d5df6aae32a6596ea0ae0935682d957c3a39004aa176a58a20f3d4094e72a33a70bc33b98de9a51e93b5daecdb3a3cc3feb4c6123c6b69812f1692c16ed78ea2ea770bf4c8da9e99c8fd60ada3723770980ac1705a8f4bad52e838e6e681c048c04783df47a2dea50167f54cee999843e0e7c194b88fa740a47c18751eafaa057b72a161ae4fb44881a6ff6fb95cf297071326703328e85f48bac428772cbb27e606cc56e3a632c3b76d70c1a0a0af7f7afa1d1b05d98639d0d9ba1b19658f6ba5e69bd5432fc3a9f1d3f996c5b8fb2371bb38acfedb592a7ec6bddfc37f4ad5421cef5db9bdff818f373a25bcb80b17f373d7388e66f946467b37c4ba89d4bd599f9681e93c13ad37c01f6fc479726e2f14405ae5e88cd05bbaa96db91b2c401d028318336cafadb95c24ce15cb8d9a88d94aa372d9f4e4046c9e8be03c5e976c197a6cf3fd0d279a7755eb0cf74ff5f80cda6e70c0953e2b85e5cf122bec205b71dfdaa717d893320fcc0e8561705b3087e2f51ffc291b13ced377e2be1339fe64a3dd25ca192053fdefdc7325378ff5f152d7f90c5cdd81eaf82acb600a1b875d8293db57e834cb24f013bb86bab28e443d0306a528ee79326b4380a376fcb343d39534c0f3b9acc7ebea331337bedeff122f8d7a28f9928c9999a8c81d2cee6cd2d7c74b3e56ed51d559506178c2a7c4052601067860756eb6aa38c579c56f1ab2ae91ff0a88788c4021f325db09444b437fd95bf663b25526ed5d8ffeeb31a706e48bb369a6a21c49177753ad5e737ee9a4daca4a5cd25255e5fb5fc4b8a9dcd920255545d1157c98c616d122d0dda24167453b9a9179b93209e6582815d552ab0d14da2f35dc34cb4dfca79816696bbc81514c92099716191a81289bf117743160deb50accd0febbbeb21f8211eeb476d0489f4b3846f6cf4ea3f1d821f701e61ba287a615caf2889b9cf2e0921658dddd1317053b2cf40be6a57bdf8afa022384b5d54a3a466e7f59ed28e767e484e88c14ec019835b53cfa89ed28b3218050c07f31c2aaa081ec42e6ab5f244004dd0600bfaa7711b17a5c761b895ed9642af8cc33da2fddf620674ad844e4bf8c25b8881828eb6232a76987829170efd01096af9d05f837bbfbfc9648b370a66a53f5cfe4ddd87d5fec0c86b228ef7b52cca352da5bd9840c8802ae0667c83c710567872e9b8c5c5d31534ffb8e7c7074243a9358e8d2518928f68368b6573a25bd80e5a1aa8af085a2846918f7b528fc73ffedf0fa5b55bbd43ed60ec314da5217b44ac3a90f296f7a9beb00a6ee2b69217acd45b6e5bface1cc45e3f7c02ec17066dc37c5d1abb0c19ac779234c03f62374f4fbba374af8f2914815d70012dcf73370def05e0929e65217f052e5cc88520e462e0c65962581b01fc16d1ea4845849dccc0f448598aca7b2f0b6e681c298b86de8f475ac11c525d330de17a31667219df52243524939b10ac1d4f83883115a898bd1c5a34e1cea8ccf316070020fae10d8969874d15594b4b37591ed79422b40fe4bbb2a52a94c6dff84d0b38078dda9cb4ad1384aa6b0d817cbd6d2ff2f975691b714189c8f34891af4d2c", 0x1000}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="61b7f732ac5cc93cee0de4feac1c70d776a1a9b4500f072d8bb49dcbf0462b836779ee5a1cd0233edba2e3d43e1561153f859282aa212c7909fd3ee9e3e985e6f09df11e58d23b455d351860c4678b3b7196ddb1fb4278a390cff81e318c7d13355952affc9fef716e92fdb31e517463deb987ca80cd643b7c026bde10e0617bd0188deb39d139e194587ee1f38a63a9e3bd6177a22fd61fce54b09af5926c392b94c5a951c1cad981c61adaf82eb975c95a5b81250a808b09666eb9de658138e44c096fafd391536ce19e1c3bedcea9", 0xd0}], 0x3, &(0x7f0000005040)=[{0xe8, 0x110, 0xbe8, "155acc7d04282398dfeff3bd543f9f840b844ca5740023f695a1b434dc8339918a96c01162b0a402b65834ed39941b0b90397044b7e988a8c0190efc032bb87effa13da26274e03acc11a56ba16e1d85eb348d847ed996d9d65844cda9bcc794cbd6449d2efa4c6bebc75680a3664f368d0d32dc5011a66c61d5daa3964687bba1454808470ea49064e33ee249bfc8dcb9ea82279d5703239f6559ba841ca7cce4fa3372c5161373ed278846aca9825c9606fc71841552de3dbdc554ef3d2c991bd1e9e6b5a7c342b7aac3e0af7eb70a1830645be1"}, {0x88, 0x117, 0x0, "e38ccca706d66f53ae2c4865731c7371bcb57e2d2c3cc0f975a8f7b640fa574dadeb2cba9b782d52a7fa1eab4dbf9c13cb5c2bf8787f7a66161ef26d47c2cd4f6e306da956c095f0a45937f53895b493890556023d6f395121588ffc194982d583a3d00c05a54db7987cd7495ce7751771"}, {0x88, 0x88, 0x80000001, "c233d386144fea99e342c3c6e83a5855985bc4fac54d5361b420a0596102b32ef09537b0ed8540df381a4d947a46d387bf071efd5d4af999174f3c304402af2e2974422f56a7459ff7c095dec6833a97cfe632e652777cdd93f18f1c712c116c2f329073f987245443bf5bb013551d89bb7a789e30f9"}, {0x108, 0xff, 0x2, "6d2d91ec636ae061fbd01f64de170e70b4cfd5509d139727d43aaad0b1982775547eef42d4436a67fe76a18ece27d9aacb5d00316b4da45cca4e4c20fbaab8a1df2bd63e6021d44a3a4a54e7dd38cd66757c4319c98beecf614021fa0bc8f0d39e16ec77d60fc6b211018dbe02f7ab3807182b8e27d8f2ee00bd271ae85590a9f2d64b2dcc907c5e1094a29538ab11fcb561b8df0a60f45f99063959679c6e35d8d1ec4f91865fb612592356b195efedc20ba0c7ea5dcaf8c8c1c20eae8843d7b377851e9f9bed5c0df78a0942ea6d509d46fa2e64e32bc3798e9a6c370a51e454977afdbd9615aad8e05d7ae3c8adb4d27e681d80"}, {0x10, 0x113, 0x5a36}, {0x48, 0x10d, 0x8, "509112b4360a4ad6e6917db8fff4bfc938d2938d5b9bb94ad1865c3de8ae98f73aded31fd6da8548d1b4ee7d5154df4b947bc8e7f7f71c"}, {0x78, 0x108, 0xffff, "1f9636ee6fc47db5f930966e432f9b27d8e760d0e57092c43eb5ef4d42703b0d4610d3a2f6043c03720a7635b5b938a68f55c617bae1746a1b5264213993a2504606a2a858c409fcd977aac087a6f3d3ca05d0e84db4b7b5f48aab93905dd503e96b5bf2a594c4cf"}, {0xa8, 0x88, 0x4, "f7636f4580593fe5f7e52a4dcbe94a1cf9835e66c241425cea612f8470cd0e7e4f7d0f063d5482a68f5fe93f1992404a11f8c9cb783abf7c97f69e49092f56a3c10a9c8fb47ea6035a76b8bbee409364dd11181b30fd03b1e67ebb86f76560f21c86893e4edeba4203d0a179bf42ed30c7ae1a4ecd041fc409a60d05af49d30d6d26f7aed8026835691e374260952815863a5d884de3a2b3"}], 0x478}}], 0x3, 0x8000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000380)={r1})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:43 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400009, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:43 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd4}}, 0x0)

15:05:43 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  263.220700] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  263.224659] overlayfs: missing 'workdir'
15:05:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  263.319030] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:43 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd4}}, 0x0)

15:05:43 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180))
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:43 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  263.409512] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  263.411141] IPv6: ADDRCONF(NETDEV_UP): veth12: link is not ready
[  263.441287] overlayfs: missing 'workdir'
15:05:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:43 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
r4 = socket(0x1, 0x803, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
sendmmsg(r5, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="41ce909c684be704ff76e26347ce17aebc3e683f77e22693308ce49512964a040acc8da198ab2ec27f882d397d5eb6cb2b6ed03d533ddc46eabceb8229b6b611293976a2125c8192b12130aa610e96b3c9f58474b2bf1c725220798cad0eb976bc0b98c3792bc64f6ea973620606099db31489399d73b20765fb3c40c8418eeca117dfefc9b3adb5848748fbe4d3c3ff9d5c0e36e323461682f60da0450fe8fa5c7dbf6722795d1c967d441f17fd08158fcb6ffa31334f102b", 0xb9}, {&(0x7f0000000600)="33a38b74340abdbceed9647ac0416af528b9de36a4f0863683f12ce9d280d1406f47747b7d18e74a1b27056531fd41c734996023115aae4ff9851d10f8f1dd77320e2f3084de0bd34b", 0x49}, {&(0x7f0000000680)="208cc70b58dbec27771f5ef5ebccd4121ef8b6901ed9918c6f92265a1ee7b8e4", 0x20}, {&(0x7f00000006c0)="de9bec2d24a11b8090743ea431d10c2103b0b7a4423433a6179a18599f46f6f956c6eae9c0e71ec261407426274ea47716cddf49e9826af7f3824bab4f2bff504d3772b000d03f5d6af75eaeddf6ae48765b40144e4dd8e94ea16d061d738156483aa2477a5f6fe55e98bab6c6e7b77dc6c3ec1012bf4c296f85b46fd0adddda061a1fe404b02029618e5341c82dee87c33f8434187cb62bb0da8798290e4141ed79a2d3ce100bc4148974fe029a13cbae4d3c6b58c4aed8fedfba6f98e86a6f", 0xc0}], 0x4}}, {{&(0x7f00000007c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0xea, 0x2, "89a5390906d069b662d932393c3d79606c4f56c0dc07f8cabf87807e3cce1442f62c619a8c90c44f84e757c11de5c9e0334ba1359510b70b4947c82768fd33", 0xd}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000940)="e77225a32a8e77bb2aad2879259e3108bfe5e58e0628eaaa6fd5a8dfdcdc0f9463e48176bbcd5ee0f61625202d6623e8c5d5110b40bd1e163d8b7eb4f1da5e0480fff1b370b4d612f7ba194c67e81762ded4599fd90744c1dc2ea127c1f027698814d496a00f49e4a28d55a3b071a0518ec94921e72c05efc9248c8ffd244a82092e078e74e5f0fb8dc836298389e30faf82103b08b4d3e4bb2126d1f18ff60ab5fc47ae098e45b7c632e25a9ea240fadcec88ecf99bac6b35c2abee02183b1abb32ba909e0a476228e26b4b29f7cdcf5bf31a741d50f385d9b208f1cb4b90c8f0c5", 0xe2}, {&(0x7f0000000840)="5bde777dc292f6f54cc6af8c5b7d08db3be29b9abab321affd26befb36972eb8e95f6181954b0f08fb0fad3bc35f4c1a4aed6da6f7813a971d54c126987671fe984f45c9568e8d956a9cee304f11a617d64dee5534ba57f13a8827987d7a5440746335b055e51dfae7d3b5ca6ae8b19b8f7637536ce0419b0b602e2fbe1e422244ff374327daf153c14174a1fac5d567df", 0x91}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="268a779b63dbcf3f46962044029f5610e1eb8c756d4f097cf9d06e8b05397e1170f430dd00c73a2a648d983f9dd0d774120ca7d5ae294142949b5703b48239e475c837ae16e90bd8368ffd400a831f16cd75b030295b28b66425fb7d0159c254ead52bdfccf6170818b3bd60b667702d3086470dfd7b5a1a6c9ad6f0f0c233fb8c947a47bd9fb108d9004d644e74", 0x8e}, {&(0x7f0000001b00)="1beddce69dd0dc8040a2d5edf64c8f040e", 0x11}, {&(0x7f0000001b40)="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", 0x1000}], 0x6, &(0x7f0000002bc0)=[{0x78, 0x114, 0xffff, "3dd43bd3b63ac8ec28a8454f8c61696e02a81bc3fb4ba509aba5fde2e9f2c9af3de9627ad7e79b8222777b83e329c0a5c2294d91f91bb38ff8cda52f2627ba73a0f45961f78fb2b3af20d9ee1a56aaec455c5f68790c3113d05dc791add7136a16"}, {0x60, 0x10c, 0x0, "7631410ea99fccae2e324ca105c8c61febf8a5ba7b654af6ba2168d477a531d51de2b1404acd36170fdb446cedfe5afe00baa7eee9786103e07c826bafbcb141fd4b1ce3b5629ab49e0b88ea95"}, {0x30, 0x6, 0x4, "989e97f761e986f9b1828c0104f5edaed3dbf6d08637a8396a5c"}, {0x18, 0x113, 0x4, "b506ecbc0ebffa0e"}, {0x78, 0x111, 0x8, "b8b8fe5bcc1dbc66f8fd9d8f2528ac461aafd0438e7cc1002f00e022c14c50e4fbfb469cbb177a19e23a55ff6335cd4e9b546a6f051163efd4d7e28fa71ea470ea1013248c79c33a54e7b81bd4069ca3cb2efa29cc61c8740fef46a6d1d49800d8"}, {0x110, 0x101, 0xff, "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"}], 0x2a8}}, {{&(0x7f0000002e80)=@isdn={0x22, 0x4, 0x73, 0xff, 0x9}, 0x80, &(0x7f0000005000)=[{&(0x7f0000002f00)="84d2099350dc7fdedc30680eb2df5efc5e8a068cd81adc043609e5447b48205f12399fdc1e828b17cd8db085cd69dc24abae1361f45b7044014844e3928b8fbe9923a2d002a20d3548daf579f7b8c4cf4de1f867d30788837e7d502942e985f9a12f91e0fa5242a7e545f305823a942a187d74f68c263cfec848d935050ded7fad788ffccc4f12191c06f99a248ad134b191adb2c65112c62d344395cf4bacbddd358309678aeb2b098b28d89befc777552eba81eb2cf9b30e753aaf143f19abfad8984b4b585925ace75d5cfa5188d4c71e6bcd3f5cf68ad01d7c6dab5622f897f52cff717acea0f96fb175a75dc8af60f306286e8448327fbcbceebbadd8faa34056592c26b019f101f500ac6141867d58aaec22f7fa244fc6417c333f592137b272bea7ac2078a80138e06d47aae8d42229e582f0562417a62fe4a3ed58f57fbcae9361f1b8653440c28914576025dfcaf8a76946fc1c27db0af1ae33718cac8c27192724ae999b1cc87221e7891ea425ed1cdd5f6c20369124428bfbf9fde11a08565b9f14b4e5e448b8edb03cfaf36e43514c7b9c2ace4786801ce42e13616b3682eea9cac750378b35750f717604c774b4e339f88bec3aef80bb86bd77b634ac05797d084332447b8df5a40218daf3c46bdbfac5a26d050e9c104a4db8e8c546b1571bf4d8b66b8a81fef1dbdc6008bd1ff23b9ad2cf2088143b1abd09bb0f023c519b5a1633c4741360411d90131a1975aa9dccabb93e3c4c7a35391328a208fbf0306760e7be17ca816e7056519893c6649b60757a4d65072b5ba76eee1c6eebe1648a17e5bfc421a52477b51083e9720ead941e06cb7e1db937e5e4f7e85e4983e824d84c90eabdd10c2fcf16b218ff340429e4a3816043bb41479c5743020c9e69763aade616f1ab6820a5acf47bfcb2cbe316fd29c8da447d6fd61d963e46f35ab1e404c3c17e38e1b47cf45ad2098a772c4945a161cd1ffa0813a695a86f0726e0ded1df4072bb4fb0d6f42b2b382cb57cd18b0c7a809ae223b0916af091baee14e2a967a03226e27fff4995780d036ae2220dfa0059ccaaafb911e41224aade66a45df8f82404039212387590ed694b4e688c6d73885279ec1769ab6565ce03c27992179a369e030a013194704757e7ba377e632cc321a467084c7d970441333b5ae42cc20d65f30a0861f545dc702a960ad4a2ae7fce7e1e1af667dc1699bfc68520fccb2b7ffabe633da2d580417e0d749f8d0c1dfc2a2e66818871bfac557dd2e5db61ce8b652a1bbe802985fcf58d8de0ddcbbade035d9f625b88ddee6a311857bfb3dd31a5a24ea1163da88cef76d8c00eb56fb1a96d60081b74fa2e3810c8650d1483b4a818ad3993b285ce74461770f521cc6db54d92f0fd8186d8416961b5d3c56831d7dc171ed4bb3d0c5718e22a30e7bc1755f5e16b801767b6ce323259982f76693e21b3808698f65ea36a53de4d79b3aac27a4847e47b096b728f81ad07fa682d5592c70b2d16415f93a6307ea1b3ab81ebbbf2c77845c8624bc071a208e52ab4fd80c811099d8a3fdc050b7a6c41fe2823fdc51764319778ca40c9ce48b60ec1eb0e31340fdc86b3656a80c45c484660b80de606459dc6b1a8dff433b6588e8c6d817fff144fd65a0dcaf8204be38c2a33d419372c6c0ae9870d724da5fe70de56b96e224cce968a828938e4d5dd6c14178a9a37ff5fc191b1c8c369aacb867ce1798413201ba8ff581cb349c651cfc5fb4470f13b9f51ee45aef4fe86e6cd348d5afa876bf93352bc57678a7eae09e6a0aef9ad5d1aae97bd3c1da6ebae1f9dcbd1e93b3d89a1dee31777d4bb664e707152c74928f5a01c3f823b331fbf34035b986e73721da7bfe7431a8e2887954a51052331fcbed02f74764f971ed3da8d00eb058840864933446dce6ba362b1d563b691ac242e4869a580620373904501ba35353ba8529be2c633cd3641d00888ae0377dd9a75aa8a76defd975f92e6496bba3f7a778df4ad6bdf5d585f797a32f375cdfd971990099668ae24e259487f343c350e7c09dc357f91e115fc25cceefc70afd5ff6267565007a934b0005d67d27ac83d0c80a0409e26675176c8c8b1aa47fa0c85e0c8fe7c2a028eaa94dc35ef1603f01ac09b467bd38fd1c940c5d1912dbc560f49e79e83d5ae263e5be0af89ee500feb05a79d0e96fc2c5b5a60c90b2cd905af37b8d9eeac7c85e83e1af7891f8b5afbadc4146256f23155eb2dea51ed896bf5f8f6e82948f9ee5390b86d266824f8ec39cb284856a07f7edbeb2f82e156859fa73d176577c7679b19cbf0f6173718451a8cebd4f85fb07d263b087b037d1ab7b2bd0d7148e0d431a9fe5e1b750fa5f3dbd43e31a65d9e4b0a14d2055e81b8c03fef406ddc82653d892e78b2bb87d79a22586d0fa1e21a65e0816c7cfa539a3f1481a776495f29cb0be6b8fd2ea5bfb18616ccc0d0cb057df6611574b9800ddbd232481f92591eaa0455353329470f5c5c3bd5c8744b4e7137be1009084e305d25a92353ee2134d03a1f1b8aff500824a6d36a27bcb98404ab70f7392425506ead965865d1ffa7f8e1d641428f40f920573610f6a2f543d6b703153cf911c6f94c9b09c356557817221fba444b74f565294bb23f90d3779d5d77591b201681129ad1886465fc8b2e9e79b7006c1c940e4185212edd4b82cdea8a3c42be605f0ee537cc6d102b7e6fb22a96a1e976ef385e71a4508cd6095bc6f44f643fa60b64c40b48b4813e7b72269814be0ae6c13e097334ae3b4825c7ef5f912e4468ab06e38cfeed72a456ababe23ba1b236fbecdbf648da4380a1fad49494bb750c3f345c118dabbe682a986340cdd0b433f89bd07f9d277debb897243749ab0126de28ed66d13d76982da7bab6f34c3f16ca393a5b29b535031d599c291c8b3ad54f6b8bfc2471d0f0698561124371016131d10eed347fcd237670c09380893c9bc5dae955b33bf830a0d8b3ecf32c3fea2b87959317dc52281fb9dcf3b1e800a1843e4dc7ce87eeb611d27d0c00476c2f0286ba38df1e609258e58e6884e3da71ccccc71b74cdab6233c1e7e1135ccd185c0dd2fa99235f41816a9c9c7b842a556ce82e479aec497b2a9a14331ab8883793452fed539f5501bd575d561bf6158f86697c21d8ac75a2e43f92df55a8655dadc693ce60f64d22227de6b35d3e1ecdedada9e96891bb17b14af832af09ca1bff1b099b4234095cb435ac36452c526df4378a10ed7aaae32841c69cea0532d8c100805a75722091fd0e282633ee9fd956dfbbe1d173155ecf284055274b31fa87d58158bcf43dd66e60e77786fcf20f3c0403570dc7d8ebcd7bc5f5c6aad04cf82215bf1e278647a2d796c3f6fb7a6f475130b9e705fe87f85ad8f77eb13809c52a11b7ef8a4073bbbd427446256dbc9eaf1c139eb11e088a3abcd0aa1323d4922403d71116c3ee38eac5fd1d0d6d9412a8a9dbbdf078d858a38a57e0c7f920ba9533e1872ac0c11887116e4f3bcf094a2e16b751b99ce02f5bd015568813a99ec7ef9d4fb6f7f86fcec9cf221309c56b93fd5f3c7022cc92d4a77d5547b50e064c1f4d39f468c473783e4896eeb0d67fc4265250c47284cfdacec1f4501213abfdabbfbe29c3cfaa18a058cb2e6ddedea48d7e48e817763da9f064c8e6249bc531d503bb15f3b659a3bdd4119c57712ee3e70f047b5d676fd1a0b5473b2feaaa0c84a17f8bb29083f2b20ea0c7d1af74e588e6fc95c0b4ee5c8e8a0f351145a981ac5a6e1c091be19583f483b986877451263528bf7baaf91ccf86e647869f8dad9d50926cd594784bcd3d59e7afe9ae7c7ab6130a4763c6ebd7b8295df7991ba73cc0b81019979135973b3fe1687d5f075d026876e1d293959412b5bb6bd18f0466f6d6b24bf4c6bec354f830f9df7565e3636afb182bba57b0dc2bf02c65d33d8d97829cb1a3372f702301809d22f73593b93a836f925e88ab59001f26431bafb179f2a5c52fdc2d30e9b809e0987c281e846b34cba70e3df8f601318b1ba47173ed75960a39f3245c4ea3e7b412496f1a3d94762ca50151d56cdedcb7578c387e29430dd8129d1b08e6e199a82322351d711b296edbd2498f9c13d3a092b0f440fe581d26bec31783c279af0f682464637ecd847ad84421ebab3fb5b30d5df6aae32a6596ea0ae0935682d957c3a39004aa176a58a20f3d4094e72a33a70bc33b98de9a51e93b5daecdb3a3cc3feb4c6123c6b69812f1692c16ed78ea2ea770bf4c8da9e99c8fd60ada3723770980ac1705a8f4bad52e838e6e681c048c04783df47a2dea50167f54cee999843e0e7c194b88fa740a47c18751eafaa057b72a161ae4fb44881a6ff6fb95cf297071326703328e85f48bac428772cbb27e606cc56e3a632c3b76d70c1a0a0af7f7afa1d1b05d98639d0d9ba1b19658f6ba5e69bd5432fc3a9f1d3f996c5b8fb2371bb38acfedb592a7ec6bddfc37f4ad5421cef5db9bdff818f373a25bcb80b17f373d7388e66f946467b37c4ba89d4bd599f9681e93c13ad37c01f6fc479726e2f14405ae5e88cd05bbaa96db91b2c401d028318336cafadb95c24ce15cb8d9a88d94aa372d9f4e4046c9e8be03c5e976c197a6cf3fd0d279a7755eb0cf74ff5f80cda6e70c0953e2b85e5cf122bec205b71dfdaa717d893320fcc0e8561705b3087e2f51ffc291b13ced377e2be1339fe64a3dd25ca192053fdefdc7325378ff5f152d7f90c5cdd81eaf82acb600a1b875d8293db57e834cb24f013bb86bab28e443d0306a528ee79326b4380a376fcb343d39534c0f3b9acc7ebea331337bedeff122f8d7a28f9928c9999a8c81d2cee6cd2d7c74b3e56ed51d559506178c2a7c4052601067860756eb6aa38c579c56f1ab2ae91ff0a88788c4021f325db09444b437fd95bf663b25526ed5d8ffeeb31a706e48bb369a6a21c49177753ad5e737ee9a4daca4a5cd25255e5fb5fc4b8a9dcd920255545d1157c98c616d122d0dda24167453b9a9179b93209e6582815d552ab0d14da2f35dc34cb4dfca79816696bbc81514c92099716191a81289bf117743160deb50accd0febbbeb21f8211eeb476d0489f4b3846f6cf4ea3f1d821f701e61ba287a615caf2889b9cf2e0921658dddd1317053b2cf40be6a57bdf8afa022384b5d54a3a466e7f59ed28e767e484e88c14ec019835b53cfa89ed28b3218050c07f31c2aaa081ec42e6ab5f244004dd0600bfaa7711b17a5c761b895ed9642af8cc33da2fddf620674ad844e4bf8c25b8881828eb6232a76987829170efd01096af9d05f837bbfbfc9648b370a66a53f5cfe4ddd87d5fec0c86b228ef7b52cca352da5bd9840c8802ae0667c83c710567872e9b8c5c5d31534ffb8e7c7074243a9358e8d2518928f68368b6573a25bd80e5a1aa8af085a2846918f7b528fc73ffedf0fa5b55bbd43ed60ec314da5217b44ac3a90f296f7a9beb00a6ee2b69217acd45b6e5bface1cc45e3f7c02ec17066dc37c5d1abb0c19ac779234c03f62374f4fbba374af8f2914815d70012dcf73370def05e0929e65217f052e5cc88520e462e0c65962581b01fc16d1ea4845849dccc0f448598aca7b2f0b6e681c298b86de8f475ac11c525d330de17a31667219df52243524939b10ac1d4f83883115a898bd1c5a34e1cea8ccf316070020fae10d8969874d15594b4b37591ed79422b40fe4bbb2a52a94c6dff84d0b38078dda9cb4ad1384aa6b0d817cbd6d2ff2f975691b714189c8f34891af4d2c", 0x1000}, {&(0x7f0000003f00)="d8699ccab27787686868243f7fe311a49445f585c9739ad19d806776b3402915eca384dccbdbba1cf9eaac76ce1b3824d0980a4ce8bc235917d1de184907cc076b667e730aee1a6d8247e09cd12d9de85410b6da206770ebe426f9f9ca7c08784c196f5414d640373b9e416fe74444dd5f88b9bc14cb4d89871aa0231aa4368aa9d9166536c557425a1e7e364209a9ffad172e1da371e34499aa382dd3f5fafbbdf63241169b7f86aa1b2bbc829d69b1d06e82f68a1d19316d9f229b97d111f26369b14077ae038a6c7a57262e0d0d27edfd373372a61244c3003d7b5a6ba8f42eaeb755d7ca4af1f57f75e6e44de79451173fb18c758a1f1991d0c8b52f8b7a7af8f7d1946b00616b71a9be4b2e85a939a8c82045713650ccf49f2ea625236ea2e1237c5ac833623dc00f5e2cdf0a5e4292601d1d935be4fd5f662f3ddf71b096ba51d012bbd15758d0b9a61f8c4a753dfaf4a38b9c7e83a30eac533f2d05ac436eb865e37b90b67c73a14c8891bc07585bbf25afd11a2e9827cf8e1409c0888a9a18ac530c750c3a928983d9adbce25f0547715f04e21ba1999b8122590f17c32a7449d9af8b8fbb2cdef96c362d4a4a7899a6f1a6c49308078b2cea5210a1bfbf74628828833bb172ce7f641df1f655442f0ba2d0c90586834c426e7392aaf4adf2808cfd708d73cf6ea59883f72ed2bdf51117f31da7240360f0174abf0173a33b75d520119bcb36e15351e6443312381452067539a82d5f87b1be6c2867b6c311506d5bcb819b044ebe063a47d77d879dd621855dfa42360d1a96336ce4faf63f73a2c7fe6866791cd35e2fd8e71ab22b925adaae19e9071de5225ecc22ded9c4a71a1204e7ebc74d2c3750d19af138f482d87d4c2e36e3ea558cb1a7a8aadc388a006aee1318459e9eaa4d2d912094e6006876658cdd19aad28aa5b42849dd7851607a72646281366daec0426327790495b1499b6fb5b525a87674af7963baccae7d31deff324a7673712f2f7029797c892ed5b20b555295e9249aa79bcf6baa65d0fa12242405b98e4b18733fc123cb96f26f410a37acfc429b937fb42404ff0cac967ac7c250c0e28d81fc8f6ff599c692ef527e3beed2782462d8a89cc4788c010a00a6228585b5becb931565eef683f67f9f8f82d980a829ae2e758635dd74a06b77537ab81cf1677ec8bdfc39a8cbe92ce718fa3642d202e9aa53e01284bffe5a3c1a8a93c56813a80806cba7fa0a195163d1db8bf6f3515abe747b14b44f4b0ce08aee454216349710ea3a0bfa551e5c4feb737f74db7d1cfdc44b7265f8bc39cebd5d96bfca5fd51bf1223e8104eedefd15720fd5759ab46c85d2e0dfe71041ff17e35701ae3a327c07d522e07c7f9760772701d98b7c31b7b90a4225cf95a3e2ec9dded66f96e07d07a017dd096ab215b4bdbf86dce85a2f3669356ca4467dfffd3616a66879c9ddca2cbeabf0b3702a83ce4e7caa349e23bc4fe45822ee162a03f0096d379516592dedccd01b5ccb0f86296fc7f429507588c3576f8380670d125ef17f182c21dc01327c46f468bd139b56daa8343c27803b6037ae7debfac8b24edb8993b8471dbd8bf4648a3537026979124484d43c10bfc9dcf86765e4d3ffd62949fc2d98323cfb19ebd6d4a80623c0fc60d94aa17c0be17a7f9c1c1dc4b5658f52d30b560418767704bfd36b53b8c57a7ce2292bf8facbe6e59c17f3c5e9ddbf3b0cc66b4e5ebec663b8655d6f36fbcdac8e60e2da26e40dade1e66eaa78bcc5a083d8a9c3d84ef1428d46fa30bf0548b160154a09c7e419683d83dc167835f42c359c2bbe57b06eca1deee1edb4b25bbe1cdd28434084f96c282291705ccd45c2eeda640e4c35cb6d86f8a121805686f291d13db128999732a0156fef348ce3fe120c9c9036ab8fee61f3c27145bf5a331bacabd501063288f38be385d5ec16bd35b639b7ef31fafd416d3d7903a02154aef591efba820481659435de25effec8024f685275adc060efe7047355d956d173ab5c0eb872d88e8c414bfc81dbddeec857125e7844894568c90335bfeca76255bdb6aae42afa3703190f85de4b8be3908b3131c3a1c5f1feed7bc5a175d3b38c6785dfca737315afc445e75e7c3de4e12570cc1532de62cb3d35591df831a11e9fd66d0e4ab3e9fec714b88d56c5131036303c2b05651e571c81f289870b6ac7ea08b191388f56db5feef8d00cb40af94f5a2f18636575ecbf8208975ea7d03e1f911e198e5a9b022ada8dbf5e2cf588724f44523f76a09d532b23adf313bfe66d3bd3fa6c183434dff2bfa75b65c3ade4897502c0b1223b64b566532469c1f2d4d9f506d3891cec5798416a0d0e58e9c44ebedc865220dd31a4bc0894b6f3f153c5f115cd1c44e156f417d246596ffe94885d4134b8ccf64955e7525c84112befd74dbfb0f306316391b6849a763a1a9cdb7336d98f856c3b1c79fef0900fb7cc9bf0fba09a2c56e3c07a9bcabed0e02599c2dae45e49ea58cb69a85add162e82a17bad8fb17b7fe902ebbead4a04ac75a3eee4864f72bd691bcc7e08d2a73c3b2e2a0712ea01354ae26bcf48c217303339666f589b47bc38ce25f49eb9426adb2a80132611465c5a6afbc45dff2ba9e8e26a6c0ad1e8e1fd5b9a93070f8d0ad37b16296ba8b324796aa359a120495c122b93836937362215cca772031a82a1d527cafafb2cda45cdd4123499e6579b57e3262bd24010158d791898f1ff9f2a2776775774b8f3354c20d848eb93c8ff8ee3fc9ca5bb7e37a3c73ad72c7a741ba96a896473bdac57d9cf2bd36819b9c865a7c77fbaae35746fdd9557a5ee2430ab8c95f53a5af41aa2194168fdb8935f201e109ebb0189145b571654f29c327b3d335134b372ea8b36544c448549a56e40e11ac036d51a45831ec2d7650fa0c263208819dfbd538ccceff9180aeb63326e6df2cccc03e9efb01083e0a3fb4f7fb61204dae26e4a0b021f2da131829a67daa73fb2f289dd8492b387f3f5fe1dca8056f1b520f4cfb0f6b6e9f0581a1fc33b0fa61b8f8a00cfa66cf32a640be83364c3bdcb12bf1295100e9db4260d13d1fb05402d5f71199ac7d56c71dc6a25772d75fcb4866d433bef1b3876c4e68811796cc8b7ce1455466070cdcc5cab7a363a61de68b4d9ef5d2a636f953def2759a51f6c491595f8100d40224f3c2a0c8ea15bad9b09d79b8d0cb147a265fed8e97f6a691b485a3725be5e21d61ff1a9e6251134debbffe2e00973295cad619ac7039b7486ed7f6834e01da6a8c8977495468ea1cbb43d077ed73aa25d4da0293d9dd65661a864298ea846eeeaa819a32fcd5f689267f95accb02bab4e9f73dc741879ede8382b58a2d76bc8877f48b11d095654cf646e09c6877d72353efaab926e6f3a770593b139cbc334f1c3ff575bf26616b90691bf4bb1113b3ced7b3c1b6dcb3215675a7b4a6435023c6d6877eefb7b18663fa6ce7304c29ac97007130e5997e207866e4f409689af3f8652f15c8d8f9534608139cfb103c96eeda5078c61cee447a0ebfb0529d2d572b0bf90fc806f196876f0dbc6e51f75bc3694c56471c78680dc19ec2906244938a20528005ff6c2ddd43b90844696a70c69e8f038ca21aed999393786a8434a55d7217d44318dffe74399d742030bf10fc2825fda3c0e0d5b79eab1775b6c91484c72d0d5ca33cc91bb9d7ecca7e9afeca23c79c44edefd2493f10db523c67f9eead1ef19a86aada15a22b78ef724af4dd124b7f2fe24178ba57eb38ce44955d744debd0eb2f7881a35581f7e29c5db3edc2732c6c9e432e2bdef80705b35f1df373cfaf22e71a51583b2667d6a91d734bf08d052963b2e0bf01c2b60278cb690c88dd293644b4d03fb561f46f6807a075aa6162d6c33ab25be6151df3ba42e2d7ad5d96c4f1e99f706b2800c13c786fb7fc3918c02c19d79da8f8aa29b519051265b0bf2da6d7c0cee2055db453e9a0e1f2b16a26c28ae90f22a81f1f4146303b7e31e2b99a98a63b2899661e917d98745fe7a22639ed7157d3caae483265b2e39cf100135eaaa16321577bd28a30ff746245b4f3f334e15ecf3c33d2ac8c0cedd4c239fd583bcb82476d116284c222c008599f3b51df09b20c35797ac9dcc78e546b9fe809fefcbc8adfc8bc787a6a2776e1b5ae50958317e5ee6c7c517af845880560025317699db17bb309b0783905314b1136b1b59de41dc553de83219567c7025daa8eb0b9379f9e2b2de99c1f48a742041029fc35296ad8feb092b713e07b201089382edb1b67eac03f077e01ba8b6f046388234015182fde4421603f464f6b28d071b28dc20a8038f65361b00583a6a658abc74027b3e60ec65f47e21601187a332025c0f112cf932f5bd8350a9be7080f97ef02a4eae8ec034bf8a8947d6fbfb927d074e0658028f03f8e291c2ff3381c9bb6a87301f3e7ee272dcb1fc6f25bb46011123507d7709d3d2d52ab6cd84edc0845d56f25bfd7a5a73a2f94e7dc9ca80b5053335f7065aa39eac8ffa4520f60c8efb69b57a2458f759cff2154843e58eb29a14cefd2a8db1740352c0d244a5de23550a8ae9ccdef71ba56d62422e5a7d19bcb400f86a4c619880ea7b336223ffc076b1112d86c7fc337106d24783d3388bb9f8abb62cb8b0e56a4e653a78caecc565aaa137ee0838e2571857a3a91eb8dd97b7b3b7006876194ac2fc354948c8362618f84b092a1b1bc6e48e2acdceb0d7c070589a84576ce0fcd9c7763ff3d7dd271b70620b35d723ebfd25822ac09f9376f7ddcfbaa287babb094dd862fdbc2ff7e2dd90fb9ee1944a08edcef10eef45c859a786fb83bc7d80fbdc131191e3f591044dd26e6c1d36d68c0ed4f81e964be80fdf88bde69133fae7f8c8a02d6958ca836fdfdc8980fecce65f0b4655e0b7a52d7e2d384dfb0750151770988319ddc88707913a55567243e09ee3711a299bdc79815c00f52b1a48a5f3fb35e3776db5dd77588f17ea2e1066303531e3c3ef8c3f5e0db84d4ea2d6e975eea269dc91bc3857917ef1d0606ac3cebc3a9efc635f41c15c688a0fbb72aa2c09b7143a11bcd99309f5e99b8f70c633220ff134d4c9a012dbfee7c4dd105058ae6cd06e742a561ee8858d83de1f038cc97ed276c58fde991d65fcadb73e94b315c86242d394c779dbb3fcb88aae1f00ff656a18e50c178be11f61d4fc95a24357337cca64484397087261773b9ee00d64b743944004a3304704632aa0877f4b7e54f29d877636be6e48f1a61bbd42bef3c432aa71a6d0dc716fdf82638f8fe5938d10104b3ed64dbdab1abfd7b84d843c2cde842b0018047f9b0e282b9cf9ae23d1329e86f1ced57ed65a68cd149623bcc6b6987da1ead57eb233b596be0bab502b3e71be5842b98266b0a71d95eb31b8d4301c77a58a35821f2f65d3b22b96136218c1526eea2b8e3b5fa6b529d5ed5a63342ef7c6bdd1fe5557811c79ebfa95450eb2aa85dbcd98a2fa1a35e3e398dc81a45c286cd50d4aa13672ee2c853d05946b98dc6f301588259edf05d096375c348140da8a487f79432a16034dab5449482ea13efe0563940c3b7d9ae023cd1025e4548bd5a1dd1b5fde42731565574c588f21bb5b74063c7ddc86159eac01763ef385137e53057910cfac61250a1a21f08162a1538461d7105074cc6c7c5dd7a17d56d8a4e55c4840689740d3956096ce0fd4162f4eea72ebb945feb8aacea641687d8696d1569265688e63b50c5ec4ea2f0e630011cab1073331827d1d16f2a50cf517ecd7", 0x1000}, {&(0x7f0000004f00)="61b7f732ac5cc93cee0de4feac1c70d776a1a9b4500f072d8bb49dcbf0462b836779ee5a1cd0233edba2e3d43e1561153f859282aa212c7909fd3ee9e3e985e6f09df11e58d23b455d351860c4678b3b7196ddb1fb4278a390cff81e318c7d13355952affc9fef716e92fdb31e517463deb987ca80cd643b7c026bde10e0617bd0188deb39d139e194587ee1f38a63a9e3bd6177a22fd61fce54b09af5926c392b94c5a951c1cad981c61adaf82eb975c95a5b81250a808b09666eb9de658138e44c096fafd391536ce19e1c3bedcea9", 0xd0}], 0x3, &(0x7f0000005040)=[{0xe8, 0x110, 0xbe8, "155acc7d04282398dfeff3bd543f9f840b844ca5740023f695a1b434dc8339918a96c01162b0a402b65834ed39941b0b90397044b7e988a8c0190efc032bb87effa13da26274e03acc11a56ba16e1d85eb348d847ed996d9d65844cda9bcc794cbd6449d2efa4c6bebc75680a3664f368d0d32dc5011a66c61d5daa3964687bba1454808470ea49064e33ee249bfc8dcb9ea82279d5703239f6559ba841ca7cce4fa3372c5161373ed278846aca9825c9606fc71841552de3dbdc554ef3d2c991bd1e9e6b5a7c342b7aac3e0af7eb70a1830645be1"}, {0x88, 0x117, 0x0, "e38ccca706d66f53ae2c4865731c7371bcb57e2d2c3cc0f975a8f7b640fa574dadeb2cba9b782d52a7fa1eab4dbf9c13cb5c2bf8787f7a66161ef26d47c2cd4f6e306da956c095f0a45937f53895b493890556023d6f395121588ffc194982d583a3d00c05a54db7987cd7495ce7751771"}, {0x88, 0x88, 0x80000001, "c233d386144fea99e342c3c6e83a5855985bc4fac54d5361b420a0596102b32ef09537b0ed8540df381a4d947a46d387bf071efd5d4af999174f3c304402af2e2974422f56a7459ff7c095dec6833a97cfe632e652777cdd93f18f1c712c116c2f329073f987245443bf5bb013551d89bb7a789e30f9"}, {0x108, 0xff, 0x2, "6d2d91ec636ae061fbd01f64de170e70b4cfd5509d139727d43aaad0b1982775547eef42d4436a67fe76a18ece27d9aacb5d00316b4da45cca4e4c20fbaab8a1df2bd63e6021d44a3a4a54e7dd38cd66757c4319c98beecf614021fa0bc8f0d39e16ec77d60fc6b211018dbe02f7ab3807182b8e27d8f2ee00bd271ae85590a9f2d64b2dcc907c5e1094a29538ab11fcb561b8df0a60f45f99063959679c6e35d8d1ec4f91865fb612592356b195efedc20ba0c7ea5dcaf8c8c1c20eae8843d7b377851e9f9bed5c0df78a0942ea6d509d46fa2e64e32bc3798e9a6c370a51e454977afdbd9615aad8e05d7ae3c8adb4d27e681d80"}, {0x10, 0x113, 0x5a36}, {0x48, 0x10d, 0x8, "509112b4360a4ad6e6917db8fff4bfc938d2938d5b9bb94ad1865c3de8ae98f73aded31fd6da8548d1b4ee7d5154df4b947bc8e7f7f71c"}, {0x78, 0x108, 0xffff, "1f9636ee6fc47db5f930966e432f9b27d8e760d0e57092c43eb5ef4d42703b0d4610d3a2f6043c03720a7635b5b938a68f55c617bae1746a1b5264213993a2504606a2a858c409fcd977aac087a6f3d3ca05d0e84db4b7b5f48aab93905dd503e96b5bf2a594c4cf"}, {0xa8, 0x88, 0x4, "f7636f4580593fe5f7e52a4dcbe94a1cf9835e66c241425cea612f8470cd0e7e4f7d0f063d5482a68f5fe93f1992404a11f8c9cb783abf7c97f69e49092f56a3c10a9c8fb47ea6035a76b8bbee409364dd11181b30fd03b1e67ebb86f76560f21c86893e4edeba4203d0a179bf42ed30c7ae1a4ecd041fc409a60d05af49d30d6d26f7aed8026835691e374260952815863a5d884de3a2b3"}], 0x478}}], 0x3, 0x8000)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:43 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd4}}, 0x0)

[  263.557579] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  263.618563] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  263.623233] overlayfs: missing 'workdir'
[  263.644073] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
15:05:43 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180))
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:43 executing program 5 (fault-call:7 fault-nth:0):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:43 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd4}}, 0x0)

15:05:43 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  263.788739] IPv6: ADDRCONF(NETDEV_UP): veth13: link is not ready
[  263.843476] overlayfs: missing 'workdir'
15:05:43 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180))
ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:43 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd4}}, 0x0)

15:05:43 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
socket(0x1, 0x803, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
sendmmsg(r4, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="41ce909c684be704ff76e26347ce17aebc3e683f77e22693308ce49512964a040acc8da198ab2ec27f882d397d5eb6cb2b6ed03d533ddc46eabceb8229b6b611293976a2125c8192b12130aa610e96b3c9f58474b2bf1c725220798cad0eb976bc0b98c3792bc64f6ea973620606099db31489399d73b20765fb3c40c8418eeca117dfefc9b3adb5848748fbe4d3c3ff9d5c0e36e323461682f60da0450fe8fa5c7dbf6722795d1c967d441f17fd08158fcb6ffa31334f102b", 0xb9}, {&(0x7f0000000600)="33a38b74340abdbceed9647ac0416af528b9de36a4f0863683f12ce9d280d1406f47747b7d18e74a1b27056531fd41c734996023115aae4ff9851d10f8f1dd77320e2f3084de0bd34b", 0x49}, {&(0x7f0000000680)="208cc70b58dbec27771f5ef5ebccd4121ef8b6901ed9918c6f92265a1ee7b8e4", 0x20}, {&(0x7f00000006c0)="de9bec2d24a11b8090743ea431d10c2103b0b7a4423433a6179a18599f46f6f956c6eae9c0e71ec261407426274ea47716cddf49e9826af7f3824bab4f2bff504d3772b000d03f5d6af75eaeddf6ae48765b40144e4dd8e94ea16d061d738156483aa2477a5f6fe55e98bab6c6e7b77dc6c3ec1012bf4c296f85b46fd0adddda061a1fe404b02029618e5341c82dee87c33f8434187cb62bb0da8798290e4141ed79a2d3ce100bc4148974fe029a13cbae4d3c6b58c4aed8fedfba6f98e86a6f", 0xc0}], 0x4}}, {{&(0x7f00000007c0)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0xea, 0x2, "89a5390906d069b662d932393c3d79606c4f56c0dc07f8cabf87807e3cce1442f62c619a8c90c44f84e757c11de5c9e0334ba1359510b70b4947c82768fd33", 0xd}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000940)="e77225a32a8e77bb2aad2879259e3108bfe5e58e0628eaaa6fd5a8dfdcdc0f9463e48176bbcd5ee0f61625202d6623e8c5d5110b40bd1e163d8b7eb4f1da5e0480fff1b370b4d612f7ba194c67e81762ded4599fd90744c1dc2ea127c1f027698814d496a00f49e4a28d55a3b071a0518ec94921e72c05efc9248c8ffd244a82092e078e74e5f0fb8dc836298389e30faf82103b08b4d3e4bb2126d1f18ff60ab5fc47ae098e45b7c632e25a9ea240fadcec88ecf99bac6b35c2abee02183b1abb32ba909e0a476228e26b4b29f7cdcf5bf31a741d50f385d9b208f1cb4b90c8f0c5", 0xe2}, {&(0x7f0000000840)="5bde777dc292f6f54cc6af8c5b7d08db3be29b9abab321affd26befb36972eb8e95f6181954b0f08fb0fad3bc35f4c1a4aed6da6f7813a971d54c126987671fe984f45c9568e8d956a9cee304f11a617d64dee5534ba57f13a8827987d7a5440746335b055e51dfae7d3b5ca6ae8b19b8f7637536ce0419b0b602e2fbe1e422244ff374327daf153c14174a1fac5d567df", 0x91}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="268a779b63dbcf3f46962044029f5610e1eb8c756d4f097cf9d06e8b05397e1170f430dd00c73a2a648d983f9dd0d774120ca7d5ae294142949b5703b48239e475c837ae16e90bd8368ffd400a831f16cd75b030295b28b66425fb7d0159c254ead52bdfccf6170818b3bd60b667702d3086470dfd7b5a1a6c9ad6f0f0c233fb8c947a47bd9fb108d9004d644e74", 0x8e}, {&(0x7f0000001b00)="1beddce69dd0dc8040a2d5edf64c8f040e", 0x11}, {&(0x7f0000001b40)="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", 0x1000}], 0x6, &(0x7f0000002bc0)=[{0x78, 0x114, 0xffff, "3dd43bd3b63ac8ec28a8454f8c61696e02a81bc3fb4ba509aba5fde2e9f2c9af3de9627ad7e79b8222777b83e329c0a5c2294d91f91bb38ff8cda52f2627ba73a0f45961f78fb2b3af20d9ee1a56aaec455c5f68790c3113d05dc791add7136a16"}, {0x60, 0x10c, 0x0, "7631410ea99fccae2e324ca105c8c61febf8a5ba7b654af6ba2168d477a531d51de2b1404acd36170fdb446cedfe5afe00baa7eee9786103e07c826bafbcb141fd4b1ce3b5629ab49e0b88ea95"}, {0x30, 0x6, 0x4, "989e97f761e986f9b1828c0104f5edaed3dbf6d08637a8396a5c"}, {0x18, 0x113, 0x4, "b506ecbc0ebffa0e"}, {0x78, 0x111, 0x8, "b8b8fe5bcc1dbc66f8fd9d8f2528ac461aafd0438e7cc1002f00e022c14c50e4fbfb469cbb177a19e23a55ff6335cd4e9b546a6f051163efd4d7e28fa71ea470ea1013248c79c33a54e7b81bd4069ca3cb2efa29cc61c8740fef46a6d1d49800d8"}, {0x110, 0x101, 0xff, "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"}], 0x2a8}}, {{&(0x7f0000002e80)=@isdn={0x22, 0x4, 0x73, 0xff, 0x9}, 0x80, &(0x7f0000005000)=[{&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="61b7f732ac5cc93cee0de4feac1c70d776a1a9b4500f072d8bb49dcbf0462b836779ee5a1cd0233edba2e3d43e1561153f859282aa212c7909fd3ee9e3e985e6f09df11e58d23b455d351860c4678b3b7196ddb1fb4278a390cff81e318c7d13355952affc9fef716e92fdb31e517463deb987ca80cd643b7c026bde10e0617bd0188deb39d139e194587ee1f38a63a9e3bd6177a22fd61fce54b09af5926c392b94c5a951c1cad981c61adaf82eb975c95a5b81250a808b09666eb9de658138e44c096fafd391536ce19e1c3bedcea9", 0xd0}], 0x3, &(0x7f0000005040)=[{0xe8, 0x110, 0xbe8, "155acc7d04282398dfeff3bd543f9f840b844ca5740023f695a1b434dc8339918a96c01162b0a402b65834ed39941b0b90397044b7e988a8c0190efc032bb87effa13da26274e03acc11a56ba16e1d85eb348d847ed996d9d65844cda9bcc794cbd6449d2efa4c6bebc75680a3664f368d0d32dc5011a66c61d5daa3964687bba1454808470ea49064e33ee249bfc8dcb9ea82279d5703239f6559ba841ca7cce4fa3372c5161373ed278846aca9825c9606fc71841552de3dbdc554ef3d2c991bd1e9e6b5a7c342b7aac3e0af7eb70a1830645be1"}, {0x88, 0x117, 0x0, "e38ccca706d66f53ae2c4865731c7371bcb57e2d2c3cc0f975a8f7b640fa574dadeb2cba9b782d52a7fa1eab4dbf9c13cb5c2bf8787f7a66161ef26d47c2cd4f6e306da956c095f0a45937f53895b493890556023d6f395121588ffc194982d583a3d00c05a54db7987cd7495ce7751771"}, {0x88, 0x88, 0x80000001, "c233d386144fea99e342c3c6e83a5855985bc4fac54d5361b420a0596102b32ef09537b0ed8540df381a4d947a46d387bf071efd5d4af999174f3c304402af2e2974422f56a7459ff7c095dec6833a97cfe632e652777cdd93f18f1c712c116c2f329073f987245443bf5bb013551d89bb7a789e30f9"}, {0x108, 0xff, 0x2, "6d2d91ec636ae061fbd01f64de170e70b4cfd5509d139727d43aaad0b1982775547eef42d4436a67fe76a18ece27d9aacb5d00316b4da45cca4e4c20fbaab8a1df2bd63e6021d44a3a4a54e7dd38cd66757c4319c98beecf614021fa0bc8f0d39e16ec77d60fc6b211018dbe02f7ab3807182b8e27d8f2ee00bd271ae85590a9f2d64b2dcc907c5e1094a29538ab11fcb561b8df0a60f45f99063959679c6e35d8d1ec4f91865fb612592356b195efedc20ba0c7ea5dcaf8c8c1c20eae8843d7b377851e9f9bed5c0df78a0942ea6d509d46fa2e64e32bc3798e9a6c370a51e454977afdbd9615aad8e05d7ae3c8adb4d27e681d80"}, {0x10, 0x113, 0x5a36}, {0x48, 0x10d, 0x8, "509112b4360a4ad6e6917db8fff4bfc938d2938d5b9bb94ad1865c3de8ae98f73aded31fd6da8548d1b4ee7d5154df4b947bc8e7f7f71c"}, {0x78, 0x108, 0xffff, "1f9636ee6fc47db5f930966e432f9b27d8e760d0e57092c43eb5ef4d42703b0d4610d3a2f6043c03720a7635b5b938a68f55c617bae1746a1b5264213993a2504606a2a858c409fcd977aac087a6f3d3ca05d0e84db4b7b5f48aab93905dd503e96b5bf2a594c4cf"}, {0xa8, 0x88, 0x4, "f7636f4580593fe5f7e52a4dcbe94a1cf9835e66c241425cea612f8470cd0e7e4f7d0f063d5482a68f5fe93f1992404a11f8c9cb783abf7c97f69e49092f56a3c10a9c8fb47ea6035a76b8bbee409364dd11181b30fd03b1e67ebb86f76560f21c86893e4edeba4203d0a179bf42ed30c7ae1a4ecd041fc409a60d05af49d30d6d26f7aed8026835691e374260952815863a5d884de3a2b3"}], 0x478}}], 0x3, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  263.884232] FAULT_INJECTION: forcing a failure.
[  263.884232] name failslab, interval 1, probability 0, space 0, times 0
15:05:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  263.948215] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  263.991676] CPU: 1 PID: 12744 Comm: syz-executor.5 Not tainted 4.19.201-syzkaller #0
[  263.998825] nla_parse: 1 callbacks suppressed
[  263.998833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  263.999585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  263.999592] Call Trace:
[  263.999614]  dump_stack+0x1fc/0x2ef
[  263.999638]  should_fail.cold+0xa/0xf
[  264.032038]  ? setup_fault_attr+0x200/0x200
[  264.036375]  ? lock_acquire+0x170/0x3c0
[  264.040396]  __should_failslab+0x115/0x180
[  264.044645]  should_failslab+0x5/0x10
[  264.048454]  __kmalloc_track_caller+0x2a6/0x3c0
[  264.053137]  ? strndup_user+0x70/0x120
[  264.057034]  memdup_user+0x22/0xb0
[  264.060584]  strndup_user+0x70/0x120
[  264.064309]  ksys_mount+0x34/0x130
[  264.067862]  __x64_sys_mount+0xba/0x150
[  264.071842]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  264.076431]  do_syscall_64+0xf9/0x620
[  264.080243]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  264.085436] RIP: 0033:0x4665e9
[  264.088634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  264.099365] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  264.107534] RSP: 002b:00007fd0f0784188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  264.107548] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  264.107557] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  264.107565] RBP: 00007fd0f07841d0 R08: 0000000020000040 R09: 0000000000000000
[  264.107572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  264.107579] R13: 00007ffdc79d153f R14: 00007fd0f0784300 R15: 0000000000022000
[  264.135022] overlayfs: missing 'workdir'
15:05:44 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd4}}, 0x0)

15:05:44 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  264.239316] IPv6: ADDRCONF(NETDEV_UP): veth14: link is not ready
15:05:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
socket(0x1, 0x803, 0x0)
socket$pptp(0x18, 0x1, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:44 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

15:05:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  264.346443] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  264.385487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  264.412796] overlayfs: missing 'workdir'
[  264.510570] IPv6: ADDRCONF(NETDEV_UP): veth15: link is not ready
15:05:44 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:44 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:44 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:44 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

15:05:44 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  264.767195] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:44 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

[  264.819565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  264.849504] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  264.853312] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:44 executing program 3:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  264.882462] overlayfs: missing 'workdir'
[  264.891850] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  264.896348] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  264.924823] IPv6: ADDRCONF(NETDEV_UP): veth16: link is not ready
15:05:44 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:44 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

15:05:44 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  265.018935] overlayfs: missing 'workdir'
15:05:44 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400003, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:45 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

15:05:45 executing program 3:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:45 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  265.181581] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  265.224046] overlayfs: missing 'workdir'
[  265.225619] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  265.263911] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:45 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:45 executing program 3:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:45 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

[  265.315932] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  265.351402] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  265.359709] IPv6: ADDRCONF(NETDEV_UP): veth17: link is not ready
[  265.396626] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400004, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  265.443220] overlayfs: missing 'workdir'
15:05:45 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:45 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:45 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:45 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xbc}}, 0x0)

15:05:45 executing program 3:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  265.542754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  265.627621] overlayfs: missing 'workdir'
[  265.641881] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:45 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:45 executing program 3:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  265.705363] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  265.719471] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  265.742457] IPv6: ADDRCONF(NETDEV_UP): veth18: link is not ready
15:05:45 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xbc}}, 0x0)

[  265.807274] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  265.822352] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:45 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:45 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  265.858457] overlayfs: missing 'workdir'
[  265.901506] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:45 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xbc}}, 0x0)

[  265.964232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:45 executing program 3:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:45 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400005, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  266.156413] overlayfs: missing 'workdir'
15:05:46 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  266.180983] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  266.183293] IPv6: ADDRCONF(NETDEV_UP): veth19: link is not ready
15:05:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  266.242489] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  266.254576] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:46 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:46 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  266.321668] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  266.337797] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:46 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:46 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400010, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:46 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400006, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:46 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:46 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:46 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:46 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  266.630877] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  266.649523] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:46 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:46 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  266.698615] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  266.729438] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:46 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:46 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400007, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  266.792955] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:46 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:46 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400013, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:46 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  266.866461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  266.878537] overlayfs: missing 'workdir'
15:05:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:46 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:46 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  266.998463] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  267.014167] overlayfs: missing 'workdir'
[  267.037775] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:46 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  267.050041] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  267.080943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  267.090759] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:47 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400014, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  267.108219] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:47 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400008, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:47 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:47 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:47 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

[  267.235494] overlayfs: missing 'workdir'
15:05:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  267.290415] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  267.316309] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:47 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  267.337009] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  267.339401] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  267.376566] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:47 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400025, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:47 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

15:05:47 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  267.405411] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  267.445456] overlayfs: missing 'workdir'
15:05:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  267.487653] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  267.520336] overlayfs: missing 'workdir'
[  267.539129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:47 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400009, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:47 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xd0}}, 0x0)

15:05:47 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  267.590515] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  267.639772] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  267.684797] overlayfs: missing 'workdir'
[  267.701315] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:47 executing program 0 (fault-call:4 fault-nth:0):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  267.748297] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:47 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40004c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:47 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  267.794411] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  267.801037] overlayfs: missing 'workdir'
15:05:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:47 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:47 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:47 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  267.947954] overlayfs: missing 'workdir'
[  267.962055] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:47 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:47 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  268.020850] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  268.032702] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  268.050951] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:48 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  268.063295] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:48 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4000e0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  268.134609] overlayfs: missing 'workdir'
15:05:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:48 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:48 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:48 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0)

[  268.270269] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  268.286910] overlayfs: missing 'workdir'
15:05:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  268.320466] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  268.334406] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:48 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:48 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0)

15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  268.398467] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  268.405087] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:48 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:48 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400386, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:48 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, 0x0)

[  268.498942] overlayfs: missing 'workdir'
15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:48 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, 0x0, 0x0, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:48 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  268.627603] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  268.642734] overlayfs: missing 'workdir'
15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xe, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:48 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  268.676474] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  268.710659] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:48 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:48 executing program 1 (fault-call:5 fault-nth:0):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  268.774731] overlayfs: missing 'workdir'
[  268.792140] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  268.840944] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:48 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400387, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:48 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x19, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:48 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  268.909870] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  268.923770] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:48 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40000f, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:48 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x28, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  269.028083] overlayfs: missing 'workdir'
15:05:48 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0x0, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x2, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  269.070435] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:49 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  269.133327] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  269.173445] nla_parse: 6 callbacks suppressed
[  269.173453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  269.177452] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  269.208948] overlayfs: missing 'workdir'
15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x5421, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  269.219232] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  269.227247] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:49 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xa8, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400010, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:49 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400388, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x5450, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  269.397670] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  269.419489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x5451, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  269.443499] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  269.470714] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:49 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xc8, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400013, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  269.514429] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x5452, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

[  269.603347] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  269.634436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:49 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400389, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:49 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x5460, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  269.683087] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  269.696465] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400014, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:49 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x153, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x40049409, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  269.882610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  269.882961] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  269.934373] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  269.944887] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  269.970998] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:49 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  269.986465] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:49 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:49 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x4020940d, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:49 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400025, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:50 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:50 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:50 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x1400, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  270.221724] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  270.239528] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  270.251110] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  270.262499] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  270.277181] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:50 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4000e0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:50 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  270.321269] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:50 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x1900, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@xino_on}]})

15:05:50 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:50 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc0045878, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  270.465205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  270.470357] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:50 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x2800, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  270.508466] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  270.535911] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, 0x0)

15:05:50 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc0045878, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:50 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400386, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  270.567941] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  270.584942] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  270.648382] overlayfs: missing 'lowerdir'
15:05:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, 0x0)

15:05:50 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x5301, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:50 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:50 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc0189436, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  270.709501] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  270.768027] overlayfs: missing 'lowerdir'
[  270.789507] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:50 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, 0x0)

15:05:50 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  270.842803] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  270.854726] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  270.863359] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:50 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc018aa3f, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  270.901763] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:50 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xa800, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400387, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  270.946073] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  270.971687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:50 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  271.004114] overlayfs: missing 'lowerdir'
15:05:50 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:51 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020660b, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xc800, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  271.157907] overlayfs: missing 'workdir'
[  271.172217] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  271.176085] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})

15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  271.209942] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  271.213778] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  271.243606] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:51 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400388, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:51 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  271.272254] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  271.367432] overlayfs: missing 'lowerdir'
15:05:51 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038e, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})

15:05:51 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x0, 0x60000fe})

[  271.427237] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x400300, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  271.487563] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  271.512866] overlayfs: missing 'lowerdir'
[  271.530695] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}]})

15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:51 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400389, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:51 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2000}, 0x0, 0x60000fe})

[  271.574417] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  271.647269] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  271.669651] overlayfs: missing 'lowerdir'
15:05:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  271.705371] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:51 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038f, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:51 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3000}, 0x0, 0x60000fe})

[  271.819278] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  271.825040] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  271.883860] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:51 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4000}, 0x0, 0x60000fe})

[  271.941578] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  271.976992] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
15:05:51 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:51 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  271.985746] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  272.060916] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:52 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5000}, 0x0, 0x60000fe})

15:05:52 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400390, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:52 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  272.169949] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  272.188056] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:52 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:52 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  272.234943] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  272.266218] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:52 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6000}, 0x0, 0x60000fe})

15:05:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:52 executing program 3 (fault-call:4 fault-nth:0):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  272.287390] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:52 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  272.350714] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:52 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7000}, 0x0, 0x60000fe})

15:05:52 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400391, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:52 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  272.446428] FAULT_INJECTION: forcing a failure.
[  272.446428] name failslab, interval 1, probability 0, space 0, times 0
[  272.507464] CPU: 1 PID: 13694 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  272.515376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  272.519498] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  272.524726] Call Trace:
[  272.524750]  dump_stack+0x1fc/0x2ef
[  272.524768]  should_fail.cold+0xa/0xf
[  272.524787]  ? setup_fault_attr+0x200/0x200
[  272.549138]  ? lock_acquire+0x170/0x3c0
[  272.553128]  __should_failslab+0x115/0x180
[  272.557372]  should_failslab+0x5/0x10
[  272.560034] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  272.561183]  __kmalloc_track_caller+0x2a6/0x3c0
[  272.561200]  ? strndup_user+0x70/0x120
[  272.561222]  memdup_user+0x22/0xb0
[  272.571422] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  272.575916]  strndup_user+0x70/0x120
[  272.575935]  ksys_mount+0x34/0x130
[  272.575956]  __x64_sys_mount+0xba/0x150
[  272.575973]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  272.575990]  do_syscall_64+0xf9/0x620
[  272.589592] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  272.590155]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  272.590167] RIP: 0033:0x4665e9
[  272.590182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  272.603857] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:52 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9000}, 0x0, 0x60000fe})

15:05:52 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x14000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:52 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x19000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:52 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  272.605926] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  272.605946] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  272.605954] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  272.605961] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  272.605968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.605977] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:52 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400392, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:52 executing program 3 (fault-call:4 fault-nth:1):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:52 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x28000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:52 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa000}, 0x0, 0x60000fe})

15:05:52 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  272.876777] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  272.906935] FAULT_INJECTION: forcing a failure.
[  272.906935] name failslab, interval 1, probability 0, space 0, times 0
15:05:52 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x53010000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  272.918588] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  272.927371] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  272.962555] CPU: 1 PID: 13742 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
15:05:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  272.970495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  272.979849] Call Trace:
[  272.982460]  dump_stack+0x1fc/0x2ef
[  272.986098]  should_fail.cold+0xa/0xf
[  272.989911]  ? setup_fault_attr+0x200/0x200
[  272.994240]  ? lock_acquire+0x170/0x3c0
[  272.998234]  __should_failslab+0x115/0x180
[  273.002482]  should_failslab+0x5/0x10
[  273.006289]  __kmalloc_track_caller+0x2a6/0x3c0
[  273.010356] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  273.010964]  ? strndup_user+0x70/0x120
[  273.010991]  memdup_user+0x22/0xb0
15:05:52 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xb000}, 0x0, 0x60000fe})

15:05:52 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xc000}, 0x0, 0x60000fe})

[  273.025139]  strndup_user+0x70/0x120
[  273.028861]  ksys_mount+0x6f/0x130
[  273.032407]  __x64_sys_mount+0xba/0x150
[  273.036393]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  273.040981]  do_syscall_64+0xf9/0x620
[  273.044791]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  273.049984] RIP: 0033:0x4665e9
[  273.053180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:05:53 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xd000}, 0x0, 0x60000fe})

15:05:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  273.072087] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  273.079802] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  273.087078] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  273.094361] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  273.101638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.108910] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:53 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400393, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  273.126085] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:53 executing program 3 (fault-call:4 fault-nth:2):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:53 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xe000}, 0x0, 0x60000fe})

15:05:53 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x60000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  273.305550] FAULT_INJECTION: forcing a failure.
[  273.305550] name failslab, interval 1, probability 0, space 0, times 0
[  273.318426] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  273.322575] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  273.343450] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  273.354906] CPU: 0 PID: 13778 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  273.362907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  273.372269] Call Trace:
[  273.374870]  dump_stack+0x1fc/0x2ef
[  273.378508]  should_fail.cold+0xa/0xf
[  273.382320]  ? setup_fault_attr+0x200/0x200
[  273.386648]  ? lock_acquire+0x170/0x3c0
[  273.390632]  __should_failslab+0x115/0x180
[  273.392919] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  273.394871]  should_failslab+0x5/0x10
[  273.394888]  kmem_cache_alloc_trace+0x284/0x380
[  273.394903]  ? _copy_from_user+0xd2/0x130
[  273.394923]  copy_mount_options+0x59/0x380
[  273.418980]  ksys_mount+0x9b/0x130
[  273.422532]  __x64_sys_mount+0xba/0x150
[  273.426513]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  273.431101]  do_syscall_64+0xf9/0x620
[  273.434915]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  273.440108] RIP: 0033:0x4665e9
15:05:53 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038e, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:53 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xf000}, 0x0, 0x60000fe})

15:05:53 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  273.443298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  273.447734] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  273.462281] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  273.462294] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  273.462302] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  273.462310] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
15:05:53 executing program 3 (fault-call:4 fault-nth:3):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  273.462316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.462323] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
[  273.540267] FAULT_INJECTION: forcing a failure.
[  273.540267] name failslab, interval 1, probability 0, space 0, times 0
[  273.554044] CPU: 1 PID: 13794 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  273.561940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  273.571309] Call Trace:
[  273.573892]  dump_stack+0x1fc/0x2ef
[  273.577511]  should_fail.cold+0xa/0xf
[  273.581304]  ? setup_fault_attr+0x200/0x200
[  273.585617]  ? lock_acquire+0x170/0x3c0
[  273.589583]  __should_failslab+0x115/0x180
[  273.593805]  should_failslab+0x5/0x10
[  273.597594]  kmem_cache_alloc+0x277/0x370
[  273.601732]  getname_flags+0xce/0x590
[  273.605521]  user_path_at_empty+0x2a/0x50
[  273.609658]  do_mount+0x147/0x2f10
[  273.613193]  ? setup_fault_attr+0x200/0x200
[  273.617531]  ? lock_acquire+0x170/0x3c0
[  273.621497]  ? check_preemption_disabled+0x41/0x280
[  273.626503]  ? copy_mount_string+0x40/0x40
[  273.630739]  ? copy_mount_options+0x59/0x380
[  273.635153]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  273.640159]  ? kmem_cache_alloc_trace+0x323/0x380
[  273.645007]  ? copy_mount_options+0x26f/0x380
[  273.649494]  ksys_mount+0xcf/0x130
[  273.653038]  __x64_sys_mount+0xba/0x150
[  273.657003]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  273.661577]  do_syscall_64+0xf9/0x620
[  273.665369]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  273.670548] RIP: 0033:0x4665e9
[  273.673745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  273.692630] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  273.700321] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
15:05:53 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xa8000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:53 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x11000}, 0x0, 0x60000fe})

[  273.707577] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  273.714838] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  273.722090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  273.729345] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:53 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400394, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:53 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:53 executing program 3 (fault-call:4 fault-nth:4):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:53 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xc8000000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  273.920148] FAULT_INJECTION: forcing a failure.
[  273.920148] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  273.931978] CPU: 0 PID: 13809 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  273.934567] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  273.939859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  273.939867] Call Trace:
[  273.939892]  dump_stack+0x1fc/0x2ef
[  273.939915]  should_fail.cold+0xa/0xf
[  273.939933]  ? setup_fault_attr+0x200/0x200
[  273.939950]  ? unwind_next_frame+0xeee/0x1400
[  273.939963]  ? __save_stack_trace+0x72/0x190
[  273.939976]  ? deref_stack_reg+0x134/0x1d0
[  273.939993]  ? get_reg+0x176/0x1f0
[  273.950652] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  273.959389]  __alloc_pages_nodemask+0x239/0x2890
[  273.959411]  ? is_bpf_text_address+0xd5/0x1b0
[  273.959434]  ? __lock_acquire+0x6de/0x3ff0
[  273.959454]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  273.959466]  ? is_bpf_text_address+0xfc/0x1b0
[  273.959485]  ? unwind_get_return_address+0x51/0x90
[  273.959500]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  273.959512]  ? __save_stack_trace+0xaf/0x190
[  273.959537]  cache_grow_begin+0xa4/0x8a0
[  273.992687] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  274.000468]  ? setup_fault_attr+0x200/0x200
[  274.000486]  ? lock_acquire+0x170/0x3c0
[  274.000505]  cache_alloc_refill+0x273/0x340
[  274.000521]  kmem_cache_alloc+0x346/0x370
[  274.000538]  getname_flags+0xce/0x590
15:05:53 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x12000}, 0x0, 0x60000fe})

15:05:54 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40038f, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  274.000554]  user_path_at_empty+0x2a/0x50
[  274.000569]  do_mount+0x147/0x2f10
[  274.000583]  ? setup_fault_attr+0x200/0x200
[  274.000596]  ? do_raw_spin_unlock+0x171/0x230
[  274.000614]  ? check_preemption_disabled+0x41/0x280
[  274.031943] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  274.033777]  ? copy_mount_string+0x40/0x40
[  274.033794]  ? copy_mount_options+0x59/0x380
[  274.033811]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  274.033830]  ? kmem_cache_alloc_trace+0x323/0x380
[  274.062686] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  274.065758]  ? copy_mount_options+0x26f/0x380
[  274.065778]  ksys_mount+0xcf/0x130
[  274.065795]  __x64_sys_mount+0xba/0x150
[  274.065811]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  274.065824]  do_syscall_64+0xf9/0x620
[  274.065844]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  274.155165] RIP: 0033:0x4665e9
15:05:54 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400395, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  274.158347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  274.177244] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  274.184949] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  274.192211] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  274.199625] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  274.206881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.214134] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:54 executing program 3 (fault-call:4 fault-nth:5):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:54 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x13000}, 0x0, 0x60000fe})

[  274.231690] overlayfs: missing 'workdir'
15:05:54 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  274.361542] FAULT_INJECTION: forcing a failure.
[  274.361542] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  274.373379] CPU: 1 PID: 13836 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  274.380973] nla_parse: 11 callbacks suppressed
[  274.380981] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  274.381263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  274.403742] Call Trace:
[  274.406345]  dump_stack+0x1fc/0x2ef
[  274.409991]  should_fail.cold+0xa/0xf
[  274.411511] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  274.413801]  ? setup_fault_attr+0x200/0x200
[  274.413819]  ? unwind_next_frame+0xeee/0x1400
[  274.413833]  ? __save_stack_trace+0x72/0x190
[  274.413845]  ? deref_stack_reg+0x134/0x1d0
[  274.413860]  ? get_reg+0x176/0x1f0
[  274.424959] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  274.428212]  __alloc_pages_nodemask+0x239/0x2890
[  274.428232]  ? is_bpf_text_address+0xd5/0x1b0
[  274.428252]  ? __lock_acquire+0x6de/0x3ff0
[  274.428275]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  274.428292]  ? is_bpf_text_address+0xfc/0x1b0
[  274.442850] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  274.444916]  ? unwind_get_return_address+0x51/0x90
[  274.444935]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  274.444948]  ? __save_stack_trace+0xaf/0x190
[  274.444965]  ? __lock_acquire+0x6de/0x3ff0
[  274.506884]  cache_grow_begin+0xa4/0x8a0
[  274.510953]  ? setup_fault_attr+0x200/0x200
[  274.515284]  ? lock_acquire+0x170/0x3c0
[  274.519267]  cache_alloc_refill+0x273/0x340
[  274.523637]  kmem_cache_alloc+0x346/0x370
[  274.527796]  getname_flags+0xce/0x590
[  274.528175] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  274.531604]  user_path_at_empty+0x2a/0x50
[  274.531623]  do_mount+0x147/0x2f10
[  274.531643]  ? do_raw_spin_unlock+0x171/0x230
[  274.531657]  ? check_preemption_disabled+0x41/0x280
15:05:54 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x14000}, 0x0, 0x60000fe})

15:05:54 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400396, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:54 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400390, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  274.531674]  ? copy_mount_string+0x40/0x40
[  274.541914] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  274.545837]  ? copy_mount_options+0x59/0x380
[  274.545856]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  274.545872]  ? kmem_cache_alloc_trace+0x323/0x380
[  274.545890]  ? copy_mount_options+0x26f/0x380
[  274.545908]  ksys_mount+0xcf/0x130
[  274.545924]  __x64_sys_mount+0xba/0x150
[  274.545941]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  274.600813]  do_syscall_64+0xf9/0x620
[  274.604612]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  274.609785] RIP: 0033:0x4665e9
[  274.612961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  274.631876] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  274.639566] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  274.646824] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  274.654088] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
15:05:54 executing program 3 (fault-call:4 fault-nth:6):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  274.661345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.668608] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
[  274.678928] overlayfs: missing 'workdir'
15:05:54 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x15000}, 0x0, 0x60000fe})

15:05:54 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xf5ffffff, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:54 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  274.782131] FAULT_INJECTION: forcing a failure.
[  274.782131] name failslab, interval 1, probability 0, space 0, times 0
[  274.820472] CPU: 0 PID: 13860 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  274.828383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  274.837739] Call Trace:
[  274.840344]  dump_stack+0x1fc/0x2ef
[  274.842883] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  274.843990]  should_fail.cold+0xa/0xf
[  274.844011]  ? setup_fault_attr+0x200/0x200
[  274.844030]  ? lock_acquire+0x170/0x3c0
[  274.866134]  __should_failslab+0x115/0x180
[  274.870385]  should_failslab+0x5/0x10
[  274.874196]  __kmalloc_track_caller+0x2a6/0x3c0
[  274.874280] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  274.878864]  ? kstrdup_const+0x53/0x80
[  274.878884]  kstrdup+0x36/0x70
[  274.878900]  kstrdup_const+0x53/0x80
[  274.878914]  alloc_vfsmnt+0xb5/0x780
[  274.878929]  ? _raw_read_unlock+0x29/0x40
[  274.878945]  vfs_kern_mount.part.0+0x27/0x470
[  274.878962]  do_mount+0x113c/0x2f10
[  274.878980]  ? lock_acquire+0x170/0x3c0
[  274.878996]  ? check_preemption_disabled+0x41/0x280
[  274.879015]  ? copy_mount_string+0x40/0x40
[  274.925617]  ? copy_mount_options+0x59/0x380
[  274.930036]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  274.935059]  ? kmem_cache_alloc_trace+0x323/0x380
[  274.939917]  ? copy_mount_options+0x26f/0x380
[  274.944425]  ksys_mount+0xcf/0x130
[  274.947974]  __x64_sys_mount+0xba/0x150
[  274.951954]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  274.956578]  do_syscall_64+0xf9/0x620
[  274.960396]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  274.965589] RIP: 0033:0x4665e9
15:05:54 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x16000}, 0x0, 0x60000fe})

15:05:54 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x17000}, 0x0, 0x60000fe})

[  274.968788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  274.983833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  274.987707] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  274.987722] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  274.987731] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  274.987739] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  274.987747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
15:05:54 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400397, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:54 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400391, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  274.987755] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:55 executing program 3 (fault-call:4 fault-nth:7):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:55 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:55 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x18000}, 0x0, 0x60000fe})

[  275.165633] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  275.193830] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  275.220464] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  275.224919] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  275.236737] FAULT_INJECTION: forcing a failure.
[  275.236737] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  275.256596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:55 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x19000}, 0x0, 0x60000fe})

[  275.259853] CPU: 1 PID: 13900 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  275.273075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  275.282430] Call Trace:
[  275.285027]  dump_stack+0x1fc/0x2ef
[  275.288668]  should_fail.cold+0xa/0xf
[  275.292479]  ? lock_acquire+0x170/0x3c0
[  275.292675] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  275.296457]  ? setup_fault_attr+0x200/0x200
[  275.296484]  __alloc_pages_nodemask+0x239/0x2890
15:05:55 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400398, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  275.296498]  ? pcpu_alloc+0x91f/0x1190
[  275.296515]  ? mark_held_locks+0xf0/0xf0
[  275.296530]  ? pcpu_alloc+0xe78/0x1190
[  275.296551]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  275.335741]  ? check_preemption_disabled+0x41/0x280
[  275.340768]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  275.345790]  ? pcpu_alloc+0xc9/0x1190
[  275.349592]  alloc_pages_current+0x193/0x2a0
[  275.354073]  ? __lockdep_init_map+0x100/0x5a0
[  275.358577]  get_zeroed_page+0x10/0x40
[  275.362445]  mount_fs+0x203/0x310
[  275.365892]  vfs_kern_mount.part.0+0x68/0x470
[  275.370381]  do_mount+0x113c/0x2f10
[  275.374008]  ? lock_acquire+0x170/0x3c0
[  275.377981]  ? check_preemption_disabled+0x41/0x280
[  275.382987]  ? copy_mount_string+0x40/0x40
[  275.387204]  ? copy_mount_options+0x59/0x380
[  275.391596]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  275.396598]  ? kmem_cache_alloc_trace+0x323/0x380
[  275.401426]  ? copy_mount_options+0x26f/0x380
[  275.405910]  ksys_mount+0xcf/0x130
[  275.409559]  __x64_sys_mount+0xba/0x150
[  275.413523]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  275.418531]  do_syscall_64+0xf9/0x620
[  275.422356]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  275.427540] RIP: 0033:0x4665e9
[  275.430803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  275.450130] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  275.457847] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
15:05:55 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  275.465100] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  275.472366] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  275.479706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.486959] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:55 executing program 3 (fault-call:4 fault-nth:8):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:55 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400394, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:55 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:55 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1a000}, 0x0, 0x60000fe})

[  275.670149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  275.684658] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  275.689853] FAULT_INJECTION: forcing a failure.
[  275.689853] name failslab, interval 1, probability 0, space 0, times 0
[  275.724101] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  275.732731] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  275.735872] CPU: 0 PID: 13932 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  275.750231] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  275.750763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  275.750770] Call Trace:
[  275.750793]  dump_stack+0x1fc/0x2ef
15:05:55 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400395, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:55 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400399, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  275.750814]  should_fail.cold+0xa/0xf
[  275.750830]  ? setup_fault_attr+0x200/0x200
[  275.750849]  ? lock_acquire+0x170/0x3c0
[  275.775700] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  275.776908]  __should_failslab+0x115/0x180
[  275.776928]  should_failslab+0x5/0x10
[  275.776943]  kmem_cache_alloc_trace+0x284/0x380
[  275.776960]  ? destroy_unused_super.part.0+0x120/0x120
[  275.776977]  sget_userns+0x122/0xcd0
[  275.820319]  ? destroy_unused_super.part.0+0x120/0x120
[  275.825613]  ? destroy_unused_super.part.0+0x120/0x120
[  275.830883]  sget+0x102/0x140
[  275.833975]  ? ovl_dentry_release+0x130/0x130
[  275.838454]  mount_nodev+0x2c/0x110
[  275.842061]  mount_fs+0xa3/0x310
[  275.845425]  vfs_kern_mount.part.0+0x68/0x470
[  275.849927]  do_mount+0x113c/0x2f10
[  275.853549]  ? do_raw_spin_unlock+0x171/0x230
[  275.858039]  ? check_preemption_disabled+0x41/0x280
[  275.863040]  ? copy_mount_string+0x40/0x40
[  275.867266]  ? copy_mount_options+0x59/0x380
[  275.871670]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  275.876679]  ? kmem_cache_alloc_trace+0x323/0x380
[  275.881522]  ? copy_mount_options+0x26f/0x380
[  275.886015]  ksys_mount+0xcf/0x130
[  275.889557]  __x64_sys_mount+0xba/0x150
[  275.893529]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  275.898101]  do_syscall_64+0xf9/0x620
[  275.901889]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  275.907068] RIP: 0033:0x4665e9
[  275.910255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  275.929235] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  275.936939] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  275.944209] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  275.951469] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  275.958724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.965983] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:55 executing program 3 (fault-call:4 fault-nth:9):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:55 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:55 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:55 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1b000}, 0x0, 0x60000fe})

[  276.117771] FAULT_INJECTION: forcing a failure.
[  276.117771] name failslab, interval 1, probability 0, space 0, times 0
[  276.128865] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  276.141182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:56 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xfffffff5, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  276.166309] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  276.179891] CPU: 0 PID: 13956 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  276.187884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  276.191867] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  276.197240] Call Trace:
[  276.197262]  dump_stack+0x1fc/0x2ef
[  276.197282]  should_fail.cold+0xa/0xf
[  276.197301]  ? setup_fault_attr+0x200/0x200
15:05:56 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400396, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  276.197315]  ? lock_acquire+0x170/0x3c0
[  276.197335]  __should_failslab+0x115/0x180
[  276.197352]  should_failslab+0x5/0x10
[  276.197364]  __kmalloc+0x2ab/0x3c0
[  276.197376]  ? prealloc_shrinker+0x15d/0x340
[  276.197392]  prealloc_shrinker+0x15d/0x340
[  276.197408]  sget_userns+0x7b4/0xcd0
[  276.197427]  ? destroy_unused_super.part.0+0x120/0x120
[  276.216296] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  276.218469]  ? destroy_unused_super.part.0+0x120/0x120
[  276.218485]  sget+0x102/0x140
15:05:56 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  276.218503]  ? ovl_dentry_release+0x130/0x130
[  276.218520]  mount_nodev+0x2c/0x110
[  276.218533]  mount_fs+0xa3/0x310
[  276.218550]  vfs_kern_mount.part.0+0x68/0x470
[  276.232800] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  276.234052]  do_mount+0x113c/0x2f10
[  276.234073]  ? lock_acquire+0x170/0x3c0
[  276.234092]  ? check_preemption_disabled+0x41/0x280
[  276.234106]  ? copy_mount_string+0x40/0x40
[  276.234122]  ? copy_mount_options+0x59/0x380
[  276.317276]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  276.322286]  ? kmem_cache_alloc_trace+0x323/0x380
[  276.327152]  ? copy_mount_options+0x26f/0x380
[  276.331629]  ksys_mount+0xcf/0x130
[  276.335166]  __x64_sys_mount+0xba/0x150
[  276.339173]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  276.343740]  do_syscall_64+0xf9/0x620
[  276.347526]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  276.352788] RIP: 0033:0x4665e9
[  276.355970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  276.374877] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  276.382570] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  276.389911] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  276.397166] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  276.404512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  276.411773] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:56 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1c000}, 0x0, 0x60000fe})

15:05:56 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:56 executing program 3 (fault-call:4 fault-nth:10):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:56 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1d000}, 0x0, 0x60000fe})

[  276.572384] FAULT_INJECTION: forcing a failure.
[  276.572384] name failslab, interval 1, probability 0, space 0, times 0
[  276.579953] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  276.586211] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:05:56 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  276.624222] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  276.630786] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  276.651284] CPU: 0 PID: 13982 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  276.659180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  276.668530] Call Trace:
[  276.671128]  dump_stack+0x1fc/0x2ef
[  276.674771]  should_fail.cold+0xa/0xf
[  276.678582]  ? setup_fault_attr+0x200/0x200
[  276.682910]  ? lock_acquire+0x170/0x3c0
[  276.686879]  __should_failslab+0x115/0x180
[  276.687673] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  276.691109]  should_failslab+0x5/0x10
[  276.701690]  __kmalloc+0x2ab/0x3c0
[  276.705231]  ? __list_lru_init+0xd3/0x7f0
[  276.709382]  __list_lru_init+0xd3/0x7f0
[  276.713369]  ? up_write+0x18/0x150
[  276.716918]  sget_userns+0x7e2/0xcd0
15:05:56 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400397, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  276.720642]  ? destroy_unused_super.part.0+0x120/0x120
[  276.725933]  ? destroy_unused_super.part.0+0x120/0x120
[  276.731228]  sget+0x102/0x140
[  276.734336]  ? ovl_dentry_release+0x130/0x130
[  276.738923]  mount_nodev+0x2c/0x110
[  276.742532]  mount_fs+0xa3/0x310
[  276.745882]  vfs_kern_mount.part.0+0x68/0x470
[  276.750359]  do_mount+0x113c/0x2f10
[  276.754074]  ? lock_acquire+0x170/0x3c0
[  276.758034]  ? check_preemption_disabled+0x41/0x280
[  276.763035]  ? copy_mount_string+0x40/0x40
[  276.767253]  ? copy_mount_options+0x59/0x380
[  276.771648]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  276.776647]  ? kmem_cache_alloc_trace+0x323/0x380
[  276.781575]  ? copy_mount_options+0x26f/0x380
[  276.786053]  ksys_mount+0xcf/0x130
[  276.789575]  __x64_sys_mount+0xba/0x150
[  276.793537]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  276.798111]  do_syscall_64+0xf9/0x620
[  276.801926]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  276.807106] RIP: 0033:0x4665e9
[  276.810280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  276.829164] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  276.836852] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  276.844117] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  276.851388] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  276.858651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  276.865998] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:56 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:56 executing program 3 (fault-call:4 fault-nth:11):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  276.885325] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:56 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1e000}, 0x0, 0x60000fe})

15:05:56 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0xf}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.054878] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  277.056040] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  277.071306] FAULT_INJECTION: forcing a failure.
[  277.071306] name failslab, interval 1, probability 0, space 0, times 0
15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x1f000}, 0x0, 0x60000fe})

[  277.109361] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  277.129997] CPU: 1 PID: 14014 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  277.137903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  277.147257] Call Trace:
[  277.149859]  dump_stack+0x1fc/0x2ef
[  277.153504]  should_fail.cold+0xa/0xf
[  277.157313]  ? setup_fault_attr+0x200/0x200
[  277.161645]  ? lock_acquire+0x170/0x3c0
[  277.165636]  __should_failslab+0x115/0x180
[  277.168166] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  277.169877]  should_failslab+0x5/0x10
[  277.169894]  kmem_cache_alloc_node_trace+0x244/0x3b0
[  277.169913]  __kmalloc_node+0x38/0x70
[  277.169931]  kvmalloc_node+0x61/0xf0
[  277.193086]  __list_lru_init+0x4c6/0x7f0
[  277.197155]  ? up_read+0x53/0x110
[  277.200614]  sget_userns+0x7e2/0xcd0
[  277.204338]  ? destroy_unused_super.part.0+0x120/0x120
15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x20000}, 0x0, 0x60000fe})

15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x21000}, 0x0, 0x60000fe})

[  277.209642]  ? destroy_unused_super.part.0+0x120/0x120
[  277.214922]  sget+0x102/0x140
[  277.218041]  ? ovl_dentry_release+0x130/0x130
[  277.222544]  mount_nodev+0x2c/0x110
[  277.226172]  mount_fs+0xa3/0x310
[  277.229549]  vfs_kern_mount.part.0+0x68/0x470
[  277.234077]  do_mount+0x113c/0x2f10
[  277.237706]  ? lock_acquire+0x170/0x3c0
[  277.241684]  ? check_preemption_disabled+0x41/0x280
[  277.246714]  ? copy_mount_string+0x40/0x40
[  277.250951]  ? copy_mount_options+0x59/0x380
[  277.255368]  ? rcu_read_lock_sched_held+0x16c/0x1d0
15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x22000}, 0x0, 0x60000fe})

15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x23000}, 0x0, 0x60000fe})

[  277.260389]  ? kmem_cache_alloc_trace+0x323/0x380
[  277.265238]  ? copy_mount_options+0x26f/0x380
[  277.269737]  ksys_mount+0xcf/0x130
[  277.273284]  __x64_sys_mount+0xba/0x150
[  277.277264]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  277.281847]  do_syscall_64+0xf9/0x620
[  277.285667]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  277.290860] RIP: 0033:0x4665e9
15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x24000}, 0x0, 0x60000fe})

15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.294049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  277.313031] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  277.320742] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  277.328096] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  277.335363] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  277.342652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  277.349921] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:57 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:57 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400398, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:57 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x28}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:57 executing program 3 (fault-call:4 fault-nth:12):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x25000}, 0x0, 0x60000fe})

[  277.390815] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.498646] FAULT_INJECTION: forcing a failure.
[  277.498646] name failslab, interval 1, probability 0, space 0, times 0
[  277.533631] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  277.564598] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  277.572738] CPU: 0 PID: 14045 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  277.582557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  277.586813] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  277.591923] Call Trace:
[  277.591945]  dump_stack+0x1fc/0x2ef
[  277.591963]  should_fail.cold+0xa/0xf
[  277.591981]  ? setup_fault_attr+0x200/0x200
15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.613156]  ? lock_acquire+0x170/0x3c0
[  277.617147]  __should_failslab+0x115/0x180
[  277.621391]  should_failslab+0x5/0x10
[  277.625283]  __kmalloc+0x2ab/0x3c0
[  277.627256] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  277.628820]  ? __list_lru_init+0xd3/0x7f0
[  277.628840]  __list_lru_init+0xd3/0x7f0
[  277.628853]  ? up_write+0x18/0x150
[  277.628877]  sget_userns+0x7e2/0xcd0
[  277.639138] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.643056]  ? destroy_unused_super.part.0+0x120/0x120
[  277.643075]  ? destroy_unused_super.part.0+0x120/0x120
[  277.643091]  sget+0x102/0x140
[  277.655554] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  277.661000]  ? ovl_dentry_release+0x130/0x130
[  277.661018]  mount_nodev+0x2c/0x110
[  277.661034]  mount_fs+0xa3/0x310
[  277.699601]  vfs_kern_mount.part.0+0x68/0x470
[  277.704109]  do_mount+0x113c/0x2f10
[  277.707746]  ? do_raw_spin_unlock+0x171/0x230
15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.712245]  ? check_preemption_disabled+0x41/0x280
[  277.717269]  ? copy_mount_string+0x40/0x40
[  277.721509]  ? copy_mount_options+0x59/0x380
[  277.725925]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  277.730943]  ? kmem_cache_alloc_trace+0x323/0x380
[  277.735796]  ? copy_mount_options+0x26f/0x380
[  277.740296]  ksys_mount+0xcf/0x130
[  277.743843]  __x64_sys_mount+0xba/0x150
[  277.747813]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  277.752397]  do_syscall_64+0xf9/0x620
[  277.756209]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  277.761513] RIP: 0033:0x4665e9
15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.764705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  277.783695] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  277.791497] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  277.798773] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  277.806044] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:57 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:57 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400399, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  277.813315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  277.820585] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:57 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x54}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:57 executing program 3 (fault-call:4 fault-nth:13):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:57 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x26000}, 0x0, 0x60000fe})

15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.933644] FAULT_INJECTION: forcing a failure.
[  277.933644] name failslab, interval 1, probability 0, space 0, times 0
15:05:57 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  277.979478] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  277.980467] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  277.993629] CPU: 0 PID: 14078 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  278.006287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  278.015636] Call Trace:
[  278.018233]  dump_stack+0x1fc/0x2ef
[  278.021404] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  278.021878]  should_fail.cold+0xa/0xf
[  278.021898]  ? setup_fault_attr+0x200/0x200
[  278.021913]  ? lock_acquire+0x170/0x3c0
[  278.021932]  __should_failslab+0x115/0x180
[  278.048265]  should_failslab+0x5/0x10
[  278.049063] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  278.052067]  __kmalloc+0x2ab/0x3c0
[  278.052081]  ? __list_lru_init+0xd3/0x7f0
[  278.052099]  __list_lru_init+0xd3/0x7f0
[  278.052115]  ? up_read+0x53/0x110
[  278.052136]  sget_userns+0x810/0xcd0
15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  278.077639]  ? destroy_unused_super.part.0+0x120/0x120
[  278.082926]  ? destroy_unused_super.part.0+0x120/0x120
[  278.088225]  sget+0x102/0x140
[  278.091344]  ? ovl_dentry_release+0x130/0x130
[  278.095845]  mount_nodev+0x2c/0x110
[  278.099479]  mount_fs+0xa3/0x310
[  278.102853]  vfs_kern_mount.part.0+0x68/0x470
[  278.107357]  do_mount+0x113c/0x2f10
[  278.110990]  ? lock_acquire+0x170/0x3c0
[  278.114971]  ? check_preemption_disabled+0x41/0x280
[  278.120085]  ? copy_mount_string+0x40/0x40
[  278.124340]  ? copy_mount_options+0x59/0x380
15:05:58 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039a, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  278.128753]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  278.133774]  ? kmem_cache_alloc_trace+0x323/0x380
[  278.138626]  ? copy_mount_options+0x26f/0x380
[  278.143122]  ksys_mount+0xcf/0x130
[  278.146664]  __x64_sys_mount+0xba/0x150
[  278.150551] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  278.150641]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  278.161941]  do_syscall_64+0xf9/0x620
[  278.165752]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  278.173893] RIP: 0033:0x4665e9
15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  278.177086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  278.195989] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  278.198773] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  278.203694] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
15:05:58 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x27000}, 0x0, 0x60000fe})

[  278.203703] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  278.203711] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  278.203719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  278.203727] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
[  278.229860] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
15:05:58 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0xdc}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:58 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039e, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:58 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x28000}, 0x0, 0x60000fe})

15:05:58 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:58 executing program 3 (fault-call:4 fault-nth:14):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  278.405495] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  278.436785] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  278.448422] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  278.464217] FAULT_INJECTION: forcing a failure.
[  278.464217] name failslab, interval 1, probability 0, space 0, times 0
[  278.517812] CPU: 1 PID: 14111 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  278.525712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  278.535063] Call Trace:
[  278.537656]  dump_stack+0x1fc/0x2ef
[  278.541292]  should_fail.cold+0xa/0xf
[  278.545099]  ? setup_fault_attr+0x200/0x200
[  278.549424]  ? lock_acquire+0x170/0x3c0
[  278.553412]  __should_failslab+0x115/0x180
[  278.557657]  should_failslab+0x5/0x10
[  278.561465]  kmem_cache_alloc_node_trace+0x244/0x3b0
[  278.566575]  __kmalloc_node+0x38/0x70
[  278.570389]  kvmalloc_node+0x61/0xf0
[  278.574107]  __list_lru_init+0x4c6/0x7f0
[  278.578173]  ? up_read+0x53/0x110
[  278.581631]  sget_userns+0x810/0xcd0
[  278.585355]  ? destroy_unused_super.part.0+0x120/0x120
[  278.590655]  ? destroy_unused_super.part.0+0x120/0x120
[  278.595931]  sget+0x102/0x140
[  278.599049]  ? ovl_dentry_release+0x130/0x130
[  278.603555]  mount_nodev+0x2c/0x110
[  278.607186]  mount_fs+0xa3/0x310
[  278.610560]  vfs_kern_mount.part.0+0x68/0x470
[  278.615066]  do_mount+0x113c/0x2f10
[  278.618702]  ? retint_kernel+0x2d/0x2d
[  278.622593]  ? copy_mount_string+0x40/0x40
[  278.626836]  ? copy_mount_options+0x1da/0x380
[  278.631338]  ? __sanitizer_cov_trace_pc+0x40/0x50
[  278.636188]  ? copy_mount_options+0x26f/0x380
[  278.640692]  ksys_mount+0xcf/0x130
[  278.644236]  __x64_sys_mount+0xba/0x150
[  278.648235]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  278.652827]  do_syscall_64+0xf9/0x620
[  278.656635]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  278.661827] RIP: 0033:0x4665e9
[  278.665015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  278.684012] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  278.691897] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  278.699164] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  278.706433] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
15:05:58 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039b, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:58 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:58 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  278.713701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  278.720970] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
[  278.779881] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  278.790219] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  278.808566] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:05:58 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x29000}, 0x0, 0x60000fe})

15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:58 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4026c0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:58 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:58 executing program 3 (fault-call:4 fault-nth:15):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:58 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  278.817312] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  278.832830] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:05:58 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  278.929389] FAULT_INJECTION: forcing a failure.
[  278.929389] name failslab, interval 1, probability 0, space 0, times 0
[  278.992376] CPU: 1 PID: 14147 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  279.000282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  279.009640] Call Trace:
[  279.012242]  dump_stack+0x1fc/0x2ef
[  279.014045] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  279.015877]  should_fail.cold+0xa/0xf
[  279.015899]  ? setup_fault_attr+0x200/0x200
[  279.015914]  ? lock_acquire+0x170/0x3c0
[  279.015933]  __should_failslab+0x115/0x180
[  279.015952]  should_failslab+0x5/0x10
[  279.046056]  kmem_cache_alloc_trace+0x284/0x380
[  279.050760]  ? __radix_tree_replace+0x13f/0x300
[  279.054336] overlayfs: failed to resolve './file0': -2
[  279.055433]  ? ovl_dentry_release+0x130/0x130
[  279.055449]  ovl_fill_super+0xdf/0x3f10
[  279.055471]  ? lock_downgrade+0x720/0x720
[  279.055498]  ? ovl_dentry_release+0x130/0x130
[  279.055516]  ? up_write+0x18/0x150
[  279.072325] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  279.073448]  ? sget_userns+0x39c/0xcd0
[  279.073471]  ? destroy_unused_super.part.0+0x120/0x120
[  279.073496]  ? destroy_unused_super.part.0+0x120/0x120
[  279.073508]  ? sget+0x10a/0x140
[  279.073525]  ? ovl_dentry_release+0x130/0x130
[  279.110624]  mount_nodev+0x60/0x110
[  279.114261]  mount_fs+0xa3/0x310
[  279.117643]  vfs_kern_mount.part.0+0x68/0x470
[  279.122148]  do_mount+0x113c/0x2f10
[  279.125783]  ? lock_acquire+0x170/0x3c0
[  279.129767]  ? check_preemption_disabled+0x41/0x280
[  279.134789]  ? copy_mount_string+0x40/0x40
15:05:59 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039d, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:59 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  279.139028]  ? copy_mount_options+0x59/0x380
[  279.143449]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  279.148472]  ? kmem_cache_alloc_trace+0x323/0x380
[  279.153322]  ? copy_mount_options+0x26f/0x380
[  279.157826]  ksys_mount+0xcf/0x130
[  279.161379]  __x64_sys_mount+0xba/0x150
[  279.162739] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  279.165357]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  279.165373]  do_syscall_64+0xf9/0x620
[  279.165394]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  279.165405] RIP: 0033:0x4665e9
[  279.165417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  279.165430] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  279.188039] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  279.189000] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  279.189009] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
15:05:59 executing program 3 (fault-call:4 fault-nth:16):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:59 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2a000}, 0x0, 0x60000fe})

15:05:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  279.189017] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  279.189025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.189033] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
[  279.319557] FAULT_INJECTION: forcing a failure.
[  279.319557] name failslab, interval 1, probability 0, space 0, times 0
[  279.380948] CPU: 1 PID: 14174 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  279.388858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  279.396366] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  279.398206] Call Trace:
[  279.398228]  dump_stack+0x1fc/0x2ef
[  279.398247]  should_fail.cold+0xa/0xf
[  279.408436] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  279.410866]  ? setup_fault_attr+0x200/0x200
[  279.410886]  ? lock_acquire+0x170/0x3c0
[  279.433349]  __should_failslab+0x115/0x180
[  279.437597]  should_failslab+0x5/0x10
[  279.441399]  kmem_cache_alloc+0x277/0x370
[  279.445534]  ? ovl_dentry_release+0x130/0x130
[  279.450015]  prepare_creds+0x39/0x510
[  279.453819]  ? ovl_dentry_release+0x130/0x130
[  279.458300]  ovl_fill_super+0xf9/0x3f10
[  279.462319]  ? lock_downgrade+0x720/0x720
[  279.466480]  ? ovl_dentry_release+0x130/0x130
[  279.470960]  ? up_write+0x18/0x150
[  279.474512]  ? sget_userns+0x39c/0xcd0
[  279.478385]  ? destroy_unused_super.part.0+0x120/0x120
[  279.483644]  ? destroy_unused_super.part.0+0x120/0x120
[  279.488902]  ? sget+0x10a/0x140
[  279.492164]  ? ovl_dentry_release+0x130/0x130
[  279.496639]  mount_nodev+0x60/0x110
[  279.500247]  mount_fs+0xa3/0x310
[  279.503598]  vfs_kern_mount.part.0+0x68/0x470
[  279.508098]  do_mount+0x113c/0x2f10
[  279.511707]  ? lock_acquire+0x170/0x3c0
[  279.515663]  ? check_preemption_disabled+0x41/0x280
[  279.520661]  ? copy_mount_string+0x40/0x40
[  279.524874]  ? copy_mount_options+0x59/0x380
[  279.529267]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  279.534269]  ? kmem_cache_alloc_trace+0x323/0x380
[  279.539112]  ? copy_mount_options+0x26f/0x380
[  279.543593]  ksys_mount+0xcf/0x130
[  279.547135]  __x64_sys_mount+0xba/0x150
[  279.551093]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  279.555659]  do_syscall_64+0xf9/0x620
[  279.559444]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  279.564618] RIP: 0033:0x4665e9
15:05:59 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4026c1, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:05:59 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2b000}, 0x0, 0x60000fe})

15:05:59 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x7}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:59 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039e, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  279.567810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  279.586694] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  279.594382] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  279.601631] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  279.608880] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  279.616128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.623396] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:59 executing program 3 (fault-call:4 fault-nth:17):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:05:59 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:05:59 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2c000}, 0x0, 0x60000fe})

[  279.739467] nla_parse: 6 callbacks suppressed
[  279.739477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  279.758487] FAULT_INJECTION: forcing a failure.
[  279.758487] name failslab, interval 1, probability 0, space 0, times 0
[  279.782354] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  279.794132] CPU: 0 PID: 14193 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  279.802027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  279.811378] Call Trace:
[  279.813977]  dump_stack+0x1fc/0x2ef
[  279.817616]  should_fail.cold+0xa/0xf
[  279.821424]  ? setup_fault_attr+0x200/0x200
[  279.825752]  ? lock_acquire+0x170/0x3c0
[  279.829735]  __should_failslab+0x115/0x180
[  279.833984]  should_failslab+0x5/0x10
[  279.837791]  kmem_cache_alloc+0x277/0x370
[  279.841950]  ? ovl_dentry_release+0x130/0x130
[  279.846452]  prepare_creds+0x39/0x510
[  279.850258]  ? ovl_dentry_release+0x130/0x130
[  279.854756]  ovl_fill_super+0xf9/0x3f10
[  279.858742]  ? lock_downgrade+0x720/0x720
[  279.862901]  ? ovl_dentry_release+0x130/0x130
[  279.867402]  ? up_write+0x18/0x150
[  279.870951]  ? sget_userns+0x39c/0xcd0
[  279.874849]  ? destroy_unused_super.part.0+0x120/0x120
[  279.880125]  ? destroy_unused_super.part.0+0x120/0x120
[  279.885400]  ? sget+0x10a/0x140
[  279.888686]  ? ovl_dentry_release+0x130/0x130
[  279.893186]  mount_nodev+0x60/0x110
[  279.896819]  mount_fs+0xa3/0x310
[  279.900219]  vfs_kern_mount.part.0+0x68/0x470
[  279.904722]  do_mount+0x113c/0x2f10
[  279.908358]  ? lock_acquire+0x170/0x3c0
[  279.912341]  ? check_preemption_disabled+0x41/0x280
[  279.917364]  ? copy_mount_string+0x40/0x40
[  279.921606]  ? copy_mount_options+0x59/0x380
[  279.926026]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  279.931047]  ? kmem_cache_alloc_trace+0x323/0x380
[  279.935899]  ? copy_mount_options+0x26f/0x380
[  279.940401]  ksys_mount+0xcf/0x130
[  279.943957]  __x64_sys_mount+0xba/0x150
[  279.947940]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  279.952527]  do_syscall_64+0xf9/0x620
[  279.952930] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  279.956335]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  279.956348] RIP: 0033:0x4665e9
[  279.956362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:05:59 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x9}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  279.956369] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  279.956382] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  279.956389] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  279.956396] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  279.956403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.956411] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:05:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:05:59 executing program 3 (fault-call:4 fault-nth:18):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  280.051139] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:00 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2d000}, 0x0, 0x60000fe})

15:06:00 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40f000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  280.157171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  280.179957] FAULT_INJECTION: forcing a failure.
[  280.179957] name failslab, interval 1, probability 0, space 0, times 0
[  280.203394] CPU: 1 PID: 14215 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  280.211305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  280.220662] Call Trace:
[  280.223267]  dump_stack+0x1fc/0x2ef
[  280.225770] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  280.226933]  should_fail.cold+0xa/0xf
[  280.226951]  ? setup_fault_attr+0x200/0x200
[  280.226970]  ? lock_acquire+0x170/0x3c0
[  280.237169] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  280.240811]  __should_failslab+0x115/0x180
[  280.240828]  should_failslab+0x5/0x10
[  280.240844]  __kmalloc_track_caller+0x2a6/0x3c0
[  280.268498]  ? ovl_fill_super+0x25b/0x3f10
[  280.272749]  kstrdup+0x36/0x70
[  280.275953]  ovl_fill_super+0x25b/0x3f10
[  280.280028]  ? lock_downgrade+0x720/0x720
[  280.284193]  ? ovl_dentry_release+0x130/0x130
[  280.288695]  ? up_write+0x18/0x150
[  280.292238]  ? sget_userns+0x39c/0xcd0
[  280.296135]  ? destroy_unused_super.part.0+0x120/0x120
[  280.301422]  ? destroy_unused_super.part.0+0x120/0x120
[  280.306705]  ? sget+0x10a/0x140
[  280.309991]  ? ovl_dentry_release+0x130/0x130
[  280.314496]  mount_nodev+0x60/0x110
[  280.318131]  mount_fs+0xa3/0x310
[  280.321511]  vfs_kern_mount.part.0+0x68/0x470
[  280.326021]  do_mount+0x113c/0x2f10
[  280.329655]  ? lock_acquire+0x170/0x3c0
[  280.333640]  ? check_preemption_disabled+0x41/0x280
[  280.338667]  ? copy_mount_string+0x40/0x40
[  280.342916]  ? copy_mount_options+0x59/0x380
[  280.347339]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  280.352363]  ? kmem_cache_alloc_trace+0x323/0x380
15:06:00 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x500}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:00 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2e000}, 0x0, 0x60000fe})

15:06:00 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x2f000}, 0x0, 0x60000fe})

[  280.357213]  ? copy_mount_options+0x26f/0x380
[  280.361714]  ksys_mount+0xcf/0x130
[  280.365261]  __x64_sys_mount+0xba/0x150
[  280.369230]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  280.373793]  do_syscall_64+0xf9/0x620
[  280.377580]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  280.382799] RIP: 0033:0x4665e9
[  280.385982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:06:00 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40039f, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:00 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x30000}, 0x0, 0x60000fe})

15:06:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  280.404905] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  280.412610] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  280.419900] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  280.427151] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  280.434409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  280.441664] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:06:00 executing program 3 (fault-call:4 fault-nth:19):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  280.500426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:00 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  280.558104] FAULT_INJECTION: forcing a failure.
[  280.558104] name failslab, interval 1, probability 0, space 0, times 0
[  280.575672] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:00 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x31000}, 0x0, 0x60000fe})

[  280.604296] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  280.621594] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  280.635576] CPU: 1 PID: 14237 Comm: syz-executor.3 Not tainted 4.19.201-syzkaller #0
[  280.643474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  280.652828] Call Trace:
[  280.655422]  dump_stack+0x1fc/0x2ef
[  280.659062]  should_fail.cold+0xa/0xf
[  280.662873]  ? setup_fault_attr+0x200/0x200
[  280.667202]  ? lock_acquire+0x170/0x3c0
[  280.671189]  __should_failslab+0x115/0x180
[  280.675431]  should_failslab+0x5/0x10
[  280.679286]  __kmalloc+0x2ab/0x3c0
[  280.682323] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  280.682825]  ? match_strdup+0x58/0xa0
[  280.682845]  match_strdup+0x58/0xa0
[  280.682860]  ovl_fill_super+0x560/0x3f10
[  280.682885]  ? ovl_dentry_release+0x130/0x130
15:06:00 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40fde7, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  280.699972] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  280.701063]  ? up_write+0x18/0x150
[  280.701081]  ? sget_userns+0x39c/0xcd0
[  280.701106]  ? destroy_unused_super.part.0+0x120/0x120
[  280.731674]  ? destroy_unused_super.part.0+0x120/0x120
[  280.733613] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  280.736950]  ? sget+0x10a/0x140
[  280.736974]  ? ovl_dentry_release+0x130/0x130
[  280.736992]  mount_nodev+0x60/0x110
15:06:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  280.737006]  mount_fs+0xa3/0x310
[  280.737025]  vfs_kern_mount.part.0+0x68/0x470
[  280.737043]  do_mount+0x113c/0x2f10
[  280.768407]  ? do_raw_spin_unlock+0x171/0x230
[  280.772974]  ? check_preemption_disabled+0x41/0x280
[  280.778003]  ? copy_mount_string+0x40/0x40
[  280.782246]  ? copy_mount_options+0x59/0x380
[  280.784325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  280.786660]  ? rcu_read_lock_sched_held+0x16c/0x1d0
[  280.786677]  ? kmem_cache_alloc_trace+0x323/0x380
[  280.786697]  ? copy_mount_options+0x26f/0x380
15:06:00 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  280.786717]  ksys_mount+0xcf/0x130
[  280.786734]  __x64_sys_mount+0xba/0x150
[  280.817089]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  280.821687]  do_syscall_64+0xf9/0x620
[  280.825501]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  280.830688] RIP: 0033:0x4665e9
[  280.833882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:06:00 executing program 3 (fault-call:4 fault-nth:20):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  280.840134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  280.852807] RSP: 002b:00007f0457011188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  280.852821] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  280.852830] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000400002
[  280.852839] RBP: 00007f04570111d0 R08: 0000000020000040 R09: 0000000000000000
[  280.852847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  280.852856] R13: 00007fffbfc33e0f R14: 00007f0457011300 R15: 0000000000022000
15:06:00 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4003a0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:00 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  280.953142] overlayfs: missing 'workdir'
15:06:00 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  281.005064] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:00 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x32000}, 0x0, 0x60000fe})

[  281.052432] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  281.073682] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  281.089699] overlayfs: missing 'workdir'
15:06:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400003, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  281.098802] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  281.113456] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:01 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x33000}, 0x0, 0x60000fe})

15:06:01 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  281.181176] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  281.226304] overlayfs: missing 'workdir'
15:06:01 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40ffe0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:01 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4003a1, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  281.265860] overlayfs: missing 'workdir'
15:06:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:01 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x34000}, 0x0, 0x60000fe})

15:06:01 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400004, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  281.372339] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  281.402412] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  281.406379] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:01 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  281.419625] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  281.432372] overlayfs: missing 'workdir'
[  281.439608] overlayfs: missing 'workdir'
[  281.460181] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:01 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x35000}, 0x0, 0x60000fe})

15:06:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400008, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:01 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4003a2, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  281.498535] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:01 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xe}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:01 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x7ffffffff000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  281.556711] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:01 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x36000}, 0x0, 0x60000fe})

[  281.613882] overlayfs: missing 'workdir'
15:06:01 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  281.663822] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  281.681123] overlayfs: missing 'workdir'
15:06:01 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400009, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  281.727877] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  281.746093] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:01 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x37000}, 0x0, 0x60000fe})

[  281.774964] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:01 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x19}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:01 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4003a3, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  281.825476] overlayfs: missing 'workdir'
[  281.832077] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  281.858310] overlayfs: missing 'workdir'
15:06:01 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400014, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:01 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  281.871309] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:01 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x28}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  281.952190] overlayfs: missing 'workdir'
15:06:01 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x38000}, 0x0, 0x60000fe})

[  281.973628] overlayfs: missing 'workdir'
15:06:01 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x40002c, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  282.020915] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  282.047488] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  282.051011] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x39000}, 0x0, 0x60000fe})

15:06:02 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x60}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  282.122005] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  282.147022] overlayfs: missing 'workdir'
[  282.152224] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400c00, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  282.179914] overlayfs: missing 'workdir'
15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3a000}, 0x0, 0x60000fe})

15:06:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400063, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:02 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xa8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:02 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  282.301123] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  282.336440] overlayfs: missing 'workdir'
15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3b000}, 0x0, 0x60000fe})

15:06:02 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xc8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  282.350542] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  282.377680] overlayfs: missing 'workdir'
[  282.382918] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400402, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4026c0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  282.422919] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3c000}, 0x0, 0x60000fe})

15:06:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:02 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf0}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  282.470947] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  282.547503] overlayfs: missing 'workdir'
15:06:02 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  282.576655] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  282.578939] overlayfs: missing 'workdir'
[  282.604433] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x7ffffffff000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:02 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x153}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3d000}, 0x0, 0x60000fe})

15:06:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x4026c1, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:02 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  282.752420] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3e000}, 0x0, 0x60000fe})

15:06:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  282.823223] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  282.843426] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  282.855740] overlayfs: missing 'workdir'
[  282.867880] overlayfs: missing 'workdir'
15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x3f000}, 0x0, 0x60000fe})

[  282.872624] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  282.890808] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:02 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:02 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:02 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:02 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xe00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:02 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x40000}, 0x0, 0x60000fe})

15:06:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40f000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  283.070025] overlayfs: missing 'workdir'
15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x1400}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x41000}, 0x0, 0x60000fe})

[  283.098080] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  283.104181] overlayfs: missing 'workdir'
[  283.129176] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x1900}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  283.162136] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  283.167091] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x42000}, 0x0, 0x60000fe})

15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  283.215798] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  283.245090] overlayfs: missing 'workdir'
15:06:03 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40fde7, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  283.267669] overlayfs: missing 'workdir'
15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x43000}, 0x0, 0x60000fe})

15:06:03 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  283.384134] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x5301}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x44000}, 0x0, 0x60000fe})

15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  283.434709] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  283.470956] overlayfs: missing 'workdir'
15:06:03 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x40ffe0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  283.502024] overlayfs: missing 'workdir'
[  283.504675] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x45000}, 0x0, 0x60000fe})

15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x6000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  283.571681] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  283.615473] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  283.650453] overlayfs: missing 'workdir'
15:06:03 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x46000}, 0x0, 0x60000fe})

15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xa800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  283.672550] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  283.672553] overlayfs: missing 'workdir'
[  283.694021] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:03 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x7ffffffff000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  283.801143] overlayfs: missing 'workdir'
15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x47000}, 0x0, 0x60000fe})

15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xc800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:03 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  283.847271] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  283.856293] overlayfs: missing 'workdir'
[  283.874901] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  283.938011] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  283.972098] overlayfs: missing 'workdir'
[  284.000455] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  284.011737] overlayfs: missing 'workdir'
[  284.017318] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:03 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:03 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x48000}, 0x0, 0x60000fe})

15:06:03 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:03 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:03 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  284.061875] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  284.101302] overlayfs: missing 'workdir'
15:06:04 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x34000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  284.130209] overlayfs: missing 'workdir'
15:06:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:04 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x49000}, 0x0, 0x60000fe})

[  284.211651] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  284.242064] overlayfs: missing 'workdir'
[  284.250905] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x400300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  284.266911] overlayfs: missing 'workdir'
[  284.284261] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:04 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4a000}, 0x0, 0x60000fe})

[  284.320239] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  284.351646] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:04 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf0ffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:04 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4b000}, 0x0, 0x60000fe})

15:06:04 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  284.472826] overlayfs: missing 'workdir'
15:06:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:04 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4c000}, 0x0, 0x60000fe})

[  284.504277] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  284.518656] overlayfs: missing 'workdir'
[  284.522460] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  284.546686] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:04 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  284.574151] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  284.588683] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:04 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:04 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4d000}, 0x0, 0x60000fe})

15:06:04 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  284.662766] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:04 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x3000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  284.721760] overlayfs: missing 'workdir'
[  284.759033] overlayfs: missing 'workdir'
15:06:04 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4e000}, 0x0, 0x60000fe})

15:06:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  284.806235] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:04 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  284.856041] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  284.875387] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:04 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x4f000}, 0x0, 0x60000fe})

[  284.907629] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  284.910497] overlayfs: missing 'workdir'
[  284.919598] nla_parse: 16 callbacks suppressed
[  284.919606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  284.940373] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:04 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:04 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x8000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  284.955311] overlayfs: missing 'workdir'
[  284.960791] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:04 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:04 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:04 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x50000}, 0x0, 0x60000fe})

15:06:05 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xe000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  285.093304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  285.115865] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:05 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x14000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  285.188158] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  285.206785] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  285.212285] overlayfs: missing 'workdir'
15:06:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x51000}, 0x0, 0x60000fe})

15:06:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x60, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  285.248449] overlayfs: missing 'workdir'
[  285.266221] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  285.270444] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:05 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x19000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:05 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x52000}, 0x0, 0x60000fe})

[  285.332766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:05 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

15:06:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8e, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:05 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x28000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x53000}, 0x0, 0x60000fe})

[  285.488999] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  285.511779] overlayfs: missing 'workdir'
[  285.520082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  285.536259] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  285.537054] overlayfs: missing 'workdir'
15:06:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x54000}, 0x0, 0x60000fe})

[  285.590644] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  285.607548] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:05 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x53010000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

15:06:05 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x10, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  285.650144] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  285.690325] overlayfs: missing 'workdir'
15:06:05 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x55000}, 0x0, 0x60000fe})

[  285.718707] overlayfs: missing 'workdir'
[  285.725890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x15e, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  285.796112] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  285.831724] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x56000}, 0x0, 0x60000fe})

15:06:05 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x60000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

[  285.857956] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  285.887988] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  285.905097] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  285.905734] overlayfs: missing 'workdir'
[  285.941831] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:05 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x13, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:05 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x57000}, 0x0, 0x60000fe})

[  285.947981] overlayfs: missing 'workdir'
[  285.962523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:05 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x19c, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:05 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x9effffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:05 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

15:06:06 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x58000}, 0x0, 0x60000fe})

[  286.086647] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  286.109959] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  286.143976] overlayfs: missing 'workdir'
[  286.148837] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  286.155459] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  286.175086] overlayfs: missing 'workdir'
15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xa8000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

15:06:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1b3, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  286.198320] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  286.229780] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:06 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x59000}, 0x0, 0x60000fe})

15:06:06 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x30, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  286.260200] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:06 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xc8000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x230, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:06 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5a000}, 0x0, 0x60000fe})

15:06:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

[  286.386175] cgroup: cgroup2: unknown option "upperdir=./file1"
[  286.422592] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf0ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:06 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x23a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  286.458277] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:06 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5b000}, 0x0, 0x60000fe})

[  286.519025] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  286.531035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xf5ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:06 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  286.567284] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

15:06:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2d1, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  286.625213] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:06 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5c000}, 0x0, 0x60000fe})

15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xfffff000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:06 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5c, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  286.705753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  286.721778] overlayfs: missing 'workdir'
[  286.737348] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  286.747870] overlayfs: missing 'workdir'
15:06:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2dc, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  286.773512] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  286.788743] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xffffff7f}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:06 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5d000}, 0x0, 0x60000fe})

15:06:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

15:06:06 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  286.849110] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  286.862395] overlayfs: missing 'workdir'
15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xffffff9e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:06 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5e000}, 0x0, 0x60000fe})

15:06:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x300, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  286.905611] overlayfs: missing 'workdir'
[  286.924040] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:06 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:06 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xe0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:06 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xfffffff0}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  287.009875] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x5f000}, 0x0, 0x60000fe})

[  287.065730] overlayfs: missing 'workdir'
[  287.081155] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  287.110780] cgroup: cgroup2: unknown option "upperdir=./file1"
[  287.117781] overlayfs: missing 'workdir'
[  287.148274] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:07 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:07 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xfffffff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x60000}, 0x0, 0x60000fe})

15:06:07 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x32a, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  287.241193] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  287.260056] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x10, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x61000}, 0x0, 0x60000fe})

[  287.308893] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:07 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:07 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x358, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  287.392507] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x62000}, 0x0, 0x60000fe})

15:06:07 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1b3, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:07 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  287.440139] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  287.497464] overlayfs: missing 'workdir'
[  287.499106] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  287.529885] overlayfs: missing 'workdir'
15:06:07 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x13, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x63000}, 0x0, 0x60000fe})

15:06:07 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x384, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  287.555776] cgroup: cgroup2: unknown option "upperdir=./file1"
[  287.591709] cgroup: cgroup2: unknown option "upperdir=./file1"
[  287.641914] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x64000}, 0x0, 0x60000fe})

15:06:07 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x300, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:07 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x3}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  287.708917] overlayfs: missing 'workdir'
[  287.710950] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x30, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  287.763871] overlayfs: missing 'workdir'
15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x65000}, 0x0, 0x60000fe})

15:06:07 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3f0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  287.815182] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  287.859301] cgroup: cgroup2: unknown option "upperdir=./file1"
[  287.868926] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5c, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:07 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x66000}, 0x0, 0x60000fe})

15:06:07 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  287.942322] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:07 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3f3, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:07 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  288.025603] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:08 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x408, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:08 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:08 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x67000}, 0x0, 0x60000fe})

15:06:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3fe, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  288.096656] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:08 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xe}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:08 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x68000}, 0x0, 0x60000fe})

[  288.192057] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x500, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  288.280631] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:08 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x69000}, 0x0, 0x60000fe})

15:06:08 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  288.320885] cgroup: cgroup2: unknown option "upperdir=./file1"
[  288.348639] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1b3, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  288.381373] overlayfs: missing 'workdir'
[  288.397192] overlayfs: missing 'workdir'
15:06:08 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x500, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:08 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6a000}, 0x0, 0x60000fe})

15:06:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x600, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:08 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x19}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  288.504446] cgroup: cgroup2: unknown option "upperdir=./file1"
[  288.565816] overlayfs: missing 'workdir'
15:06:08 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6b000}, 0x0, 0x60000fe})

15:06:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x300, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  288.593332] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  288.620448] overlayfs: missing 'workdir'
15:06:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}}, 0x20}}, 0x0)

[  288.663314] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:08 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x28}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x700, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:08 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6c000}, 0x0, 0x60000fe})

[  288.738790] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  288.770031] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  288.777835] overlayfs: missing 'workdir'
15:06:08 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x600, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:08 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x60}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  288.800926] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  288.804262] IPv6: ADDRCONF(NETDEV_UP): veth91: link is not ready
15:06:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x408, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  288.867388] overlayfs: missing 'workdir'
15:06:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}}, 0x20}}, 0x0)

15:06:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x900, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:08 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6d000}, 0x0, 0x60000fe})

15:06:08 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xa8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  288.968852] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  288.991272] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  289.012270] overlayfs: missing 'workdir'
[  289.030678] IPv6: ADDRCONF(NETDEV_UP): veth93: link is not ready
[  289.036487] overlayfs: missing 'workdir'
[  289.038559] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  289.043441] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6e000}, 0x0, 0x60000fe})

15:06:09 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xc8}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:09 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}}, 0x20}}, 0x0)

[  289.098977] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x500, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:09 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x700, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x6f000}, 0x0, 0x60000fe})

[  289.210154] overlayfs: missing 'workdir'
15:06:09 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xf0}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  289.231273] overlayfs: missing 'workdir'
[  289.242988] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  289.256057] IPv6: ADDRCONF(NETDEV_UP): veth95: link is not ready
15:06:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c}]}, 0x28}}, 0x0)

15:06:09 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x70000}, 0x0, 0x60000fe})

[  289.318576] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  289.348591] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x600, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  289.398968] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  289.403760] overlayfs: missing 'workdir'
[  289.423538] overlayfs: missing 'workdir'
[  289.431697] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x700, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:09 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  289.445190] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  289.445261] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x71000}, 0x0, 0x60000fe})

15:06:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c}]}, 0x28}}, 0x0)

15:06:09 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x153}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:09 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x804, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  289.554857] overlayfs: missing 'workdir'
[  289.573640] overlayfs: missing 'workdir'
[  289.582405] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:09 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  289.620737] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c}]}, 0x28}}, 0x0)

15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x72000}, 0x0, 0x60000fe})

15:06:09 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x804, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  289.699818] overlayfs: missing 'workdir'
[  289.719077] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  289.734210] overlayfs: missing 'workdir'
15:06:09 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xe00}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x73000}, 0x0, 0x60000fe})

[  289.759457] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:09 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1f00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  289.817368] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  289.852752] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x74000}, 0x0, 0x60000fe})

15:06:09 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x900, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:09 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  289.896741] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x75000}, 0x0, 0x60000fe})

15:06:09 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x1400}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x900, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:09 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:09 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x76000}, 0x0, 0x60000fe})

[  290.041377] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x1900}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2a03, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  290.100836] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  290.119616] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:10 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x77000}, 0x0, 0x60000fe})

[  290.156997] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  290.161125] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  290.175254] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x2800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3002, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  290.213279] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:10 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x5301}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:10 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x78000}, 0x0, 0x60000fe})

15:06:10 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3a00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x6000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  290.385372] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  290.405181] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  290.428669] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  290.450884] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  290.474668] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  290.475972] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3a02, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:10 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x79000}, 0x0, 0x60000fe})

[  290.491677] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xa800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:10 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3f00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:10 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7a000}, 0x0, 0x60000fe})

15:06:10 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xc800}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  290.690817] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  290.721979] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4a00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:10 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7b000}, 0x0, 0x60000fe})

[  290.739508] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  290.751980] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  290.769919] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xf000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  290.793519] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  290.810282] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:10 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7c000}, 0x0, 0x60000fe})

[  290.848667] overlayfs: missing 'workdir'
[  290.886598] overlayfs: missing 'workdir'
15:06:10 executing program 2 (fault-call:6 fault-nth:0):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:10 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x34000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5803, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:10 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7d000}, 0x0, 0x60000fe})

[  290.982431] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  291.007265] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:10 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x400300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:10 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5e01, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  291.027716] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  291.039345] nla_parse: 16 callbacks suppressed
[  291.039354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  291.089541] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  291.102315] FAULT_INJECTION: forcing a failure.
[  291.102315] name failslab, interval 1, probability 0, space 0, times 0
[  291.128465] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  291.152550] CPU: 0 PID: 15429 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  291.160463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  291.170439] Call Trace:
[  291.173057]  dump_stack+0x1fc/0x2ef
[  291.176762]  should_fail.cold+0xa/0xf
[  291.180580]  ? setup_fault_attr+0x200/0x200
[  291.184913]  ? lock_acquire+0x170/0x3c0
15:06:11 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xf0ffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:11 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  291.188912]  __should_failslab+0x115/0x180
[  291.193155]  should_failslab+0x5/0x10
[  291.196968]  kmem_cache_alloc_node+0x245/0x3b0
[  291.201564]  __alloc_skb+0x71/0x560
[  291.205209]  netlink_sendmsg+0x9ee/0xc40
[  291.209287]  ? aa_af_perm+0x230/0x230
[  291.213092]  ? nlmsg_notify+0x1a0/0x1a0
[  291.217073]  ? kernel_recvmsg+0x220/0x220
[  291.221236]  ? nlmsg_notify+0x1a0/0x1a0
[  291.225214]  sock_sendmsg+0xc3/0x120
[  291.228915]  ___sys_sendmsg+0x7bb/0x8e0
[  291.232942]  ? check_preemption_disabled+0x41/0x280
[  291.238055]  ? copy_msghdr_from_user+0x440/0x440
[  291.242821]  ? __fget+0x32f/0x510
[  291.246269]  ? lock_downgrade+0x720/0x720
[  291.250410]  ? check_preemption_disabled+0x41/0x280
[  291.255437]  ? check_preemption_disabled+0x41/0x280
[  291.260451]  ? __fget+0x356/0x510
[  291.263894]  ? do_dup2+0x450/0x450
[  291.267421]  ? lock_downgrade+0x720/0x720
[  291.271554]  ? vfs_write+0x3d7/0x540
[  291.275265]  ? __fdget+0x1d0/0x230
[  291.278888]  __x64_sys_sendmsg+0x132/0x220
[  291.283106]  ? __sys_sendmsg+0x1b0/0x1b0
[  291.287166]  ? vfs_write+0x393/0x540
[  291.290873]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  291.296233]  ? trace_hardirqs_off_caller+0x6e/0x210
[  291.301249]  ? do_syscall_64+0x21/0x620
[  291.305224]  do_syscall_64+0xf9/0x620
[  291.309054]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  291.314237] RIP: 0033:0x4665e9
[  291.317456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7e000}, 0x0, 0x60000fe})

[  291.336362] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.344083] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  291.351353] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  291.358613] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  291.365876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.373139] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
15:06:11 executing program 2 (fault-call:6 fault-nth:1):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:11 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x7f000}, 0x0, 0x60000fe})

[  291.481219] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  291.495739] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  291.518010] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:11 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x1000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  291.530343] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  291.548211] FAULT_INJECTION: forcing a failure.
[  291.548211] name failslab, interval 1, probability 0, space 0, times 0
[  291.563667] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:11 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8403, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x80000}, 0x0, 0x60000fe})

15:06:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1300, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  291.601809] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  291.632339] CPU: 0 PID: 15452 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  291.640245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  291.649663] Call Trace:
15:06:11 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  291.652272]  dump_stack+0x1fc/0x2ef
[  291.655921]  should_fail.cold+0xa/0xf
[  291.659734]  ? setup_fault_attr+0x200/0x200
[  291.664071]  ? lock_acquire+0x170/0x3c0
[  291.668064]  __should_failslab+0x115/0x180
[  291.672401]  should_failslab+0x5/0x10
[  291.676262]  kmem_cache_alloc_node_trace+0x244/0x3b0
[  291.681380]  __kmalloc_node_track_caller+0x38/0x70
[  291.686420]  __alloc_skb+0xae/0x560
[  291.690070]  netlink_sendmsg+0x9ee/0xc40
[  291.694151]  ? aa_af_perm+0x230/0x230
[  291.697966]  ? nlmsg_notify+0x1a0/0x1a0
[  291.701955]  ? kernel_recvmsg+0x220/0x220
[  291.706128]  ? nlmsg_notify+0x1a0/0x1a0
[  291.710119]  sock_sendmsg+0xc3/0x120
[  291.713848]  ___sys_sendmsg+0x7bb/0x8e0
[  291.717837]  ? check_preemption_disabled+0x41/0x280
[  291.722954]  ? copy_msghdr_from_user+0x440/0x440
[  291.727734]  ? __fget+0x32f/0x510
[  291.731296]  ? lock_downgrade+0x720/0x720
[  291.735483]  ? check_preemption_disabled+0x41/0x280
[  291.740510]  ? check_preemption_disabled+0x41/0x280
[  291.745543]  ? __fget+0x356/0x510
[  291.749095]  ? do_dup2+0x450/0x450
15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x81000}, 0x0, 0x60000fe})

[  291.752748]  ? lock_downgrade+0x720/0x720
[  291.756995]  ? vfs_write+0x3d7/0x540
[  291.760720]  ? __fdget+0x1d0/0x230
[  291.764270]  __x64_sys_sendmsg+0x132/0x220
[  291.768513]  ? __sys_sendmsg+0x1b0/0x1b0
[  291.772579]  ? vfs_write+0x393/0x540
[  291.776311]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  291.782118]  ? trace_hardirqs_off_caller+0x6e/0x210
[  291.787235]  ? do_syscall_64+0x21/0x620
[  291.791241]  do_syscall_64+0xf9/0x620
[  291.795053]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x82000}, 0x0, 0x60000fe})

[  291.800331] RIP: 0033:0x4665e9
[  291.803532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  291.822444] RSP: 002b:00007f233c481188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.830162] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9
[  291.837437] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  291.844715] RBP: 00007f233c4811d0 R08: 0000000000000000 R09: 0000000000000000
15:06:11 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1300, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x83000}, 0x0, 0x60000fe})

15:06:11 executing program 2 (fault-call:6 fault-nth:2):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  291.849923] overlayfs: missing 'workdir'
[  291.851984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.851995] R13: 00007ffd978618bf R14: 00007f233c481300 R15: 0000000000022000
15:06:11 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x3000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  291.906924] overlayfs: missing 'workdir'
15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x84000}, 0x0, 0x60000fe})

15:06:11 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:11 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8e00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  291.986087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  292.011287] overlayfs: missing 'workdir'
15:06:11 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x85000}, 0x0, 0x60000fe})

15:06:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:12 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x4000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  292.039586] overlayfs: missing 'workdir'
[  292.058948] FAULT_INJECTION: forcing a failure.
[  292.058948] name failslab, interval 1, probability 0, space 0, times 0
[  292.110531] CPU: 1 PID: 15508 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  292.118451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  292.127821] Call Trace:
[  292.130426]  dump_stack+0x1fc/0x2ef
[  292.134073]  should_fail.cold+0xa/0xf
[  292.137886]  ? setup_fault_attr+0x200/0x200
[  292.142225]  ? lock_downgrade+0x720/0x720
[  292.146388]  ? check_preemption_disabled+0x41/0x280
[  292.151423]  __should_failslab+0x115/0x180
[  292.155675]  should_failslab+0x5/0x10
15:06:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9c01, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:12 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x26c0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  292.159484]  kmem_cache_alloc+0x3f/0x370
[  292.163556]  skb_clone+0x151/0x3d0
[  292.167112]  netlink_deliver_tap+0x955/0xb00
[  292.171547]  netlink_unicast+0x545/0x690
[  292.175623]  ? netlink_sendskb+0x110/0x110
[  292.179867]  ? _copy_from_iter_full+0x229/0x7c0
[  292.184542]  ? __phys_addr_symbol+0x2c/0x70
[  292.188874]  ? __check_object_size+0x17b/0x3e0
[  292.193468]  netlink_sendmsg+0x6bb/0xc40
[  292.197552]  ? aa_af_perm+0x230/0x230
[  292.201408]  ? nlmsg_notify+0x1a0/0x1a0
[  292.205389]  ? kernel_recvmsg+0x220/0x220
15:06:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb301, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  292.209590]  ? nlmsg_notify+0x1a0/0x1a0
[  292.213627]  sock_sendmsg+0xc3/0x120
[  292.217358]  ___sys_sendmsg+0x7bb/0x8e0
[  292.221351]  ? check_preemption_disabled+0x41/0x280
[  292.226381]  ? copy_msghdr_from_user+0x440/0x440
[  292.231148]  ? __fget+0x32f/0x510
[  292.234616]  ? lock_downgrade+0x720/0x720
[  292.238771]  ? check_preemption_disabled+0x41/0x280
[  292.243801]  ? check_preemption_disabled+0x41/0x280
[  292.249005]  ? __fget+0x356/0x510
[  292.252455]  ? do_dup2+0x450/0x450
[  292.256010]  ? lock_downgrade+0x720/0x720
[  292.260158]  ? vfs_write+0x3d7/0x540
[  292.263856]  ? __fdget+0x1d0/0x230
[  292.267391]  __x64_sys_sendmsg+0x132/0x220
[  292.271611]  ? __sys_sendmsg+0x1b0/0x1b0
[  292.275871]  ? vfs_write+0x393/0x540
[  292.279576]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  292.284928]  ? trace_hardirqs_off_caller+0x6e/0x210
[  292.289935]  ? do_syscall_64+0x21/0x620
[  292.293897]  do_syscall_64+0xf9/0x620
[  292.297695]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  292.302874] RIP: 0033:0x4665e9
[  292.306051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  292.324938] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.332755] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  292.340121] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  292.347381] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
15:06:12 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x86000}, 0x0, 0x60000fe})

[  292.354741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.362090] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  292.451471] IPv6: ADDRCONF(NETDEV_UP): veth107: link is not ready
15:06:12 executing program 2 (fault-call:6 fault-nth:3):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:12 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x8000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:12 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x26c1, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:12 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x26c0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:12 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x87000}, 0x0, 0x60000fe})

[  292.594291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:12 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xe000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd102, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:12 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x26c1, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  292.671042] FAULT_INJECTION: forcing a failure.
[  292.671042] name failslab, interval 1, probability 0, space 0, times 0
[  292.682971] CPU: 1 PID: 15572 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  292.690866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  292.700742] Call Trace:
[  292.703344]  dump_stack+0x1fc/0x2ef
[  292.706994]  should_fail.cold+0xa/0xf
[  292.710810]  ? setup_fault_attr+0x200/0x200
[  292.715147]  ? skb_network_protocol+0x14b/0x570
15:06:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xdc02, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  292.719829]  ? __save_stack_trace+0xaf/0x190
[  292.724246]  ? is_bpf_text_address+0xd5/0x1b0
[  292.728750]  __should_failslab+0x115/0x180
[  292.732991]  should_failslab+0x5/0x10
[  292.736798]  kmem_cache_alloc+0x3f/0x370
[  292.740874]  skb_clone+0x151/0x3d0
[  292.744434]  dev_queue_xmit_nit+0x326/0xa20
[  292.748766]  ? validate_xmit_xfrm+0x3dc/0xe30
[  292.753277]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  292.758654]  dev_hard_start_xmit+0xaa/0x920
[  292.762985]  ? validate_xmit_skb+0x764/0xd50
[  292.767410]  __dev_queue_xmit+0x269d/0x2e00
15:06:12 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x88000}, 0x0, 0x60000fe})

15:06:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  292.771756]  ? memcpy+0x35/0x50
[  292.775046]  ? netdev_pick_tx+0x2f0/0x2f0
[  292.779207]  ? __copy_skb_header+0x414/0x500
[  292.783628]  ? kfree_skbmem+0x140/0x140
[  292.787616]  ? skb_clone+0x151/0x3d0
[  292.791347]  ? __skb_clone+0x5ce/0x7c0
[  292.795274]  ? kmem_cache_alloc+0x315/0x370
[  292.799610]  netlink_deliver_tap+0x8fb/0xb00
[  292.804035]  netlink_unicast+0x545/0x690
[  292.808109]  ? netlink_sendskb+0x110/0x110
[  292.812354]  ? _copy_from_iter_full+0x229/0x7c0
[  292.817030]  ? __phys_addr_symbol+0x2c/0x70
[  292.821370]  ? __check_object_size+0x17b/0x3e0
[  292.825970]  netlink_sendmsg+0x6bb/0xc40
[  292.830041]  ? aa_af_perm+0x230/0x230
[  292.833846]  ? nlmsg_notify+0x1a0/0x1a0
[  292.837825]  ? kernel_recvmsg+0x220/0x220
[  292.841989]  ? nlmsg_notify+0x1a0/0x1a0
[  292.845986]  sock_sendmsg+0xc3/0x120
[  292.849713]  ___sys_sendmsg+0x7bb/0x8e0
[  292.853695]  ? check_preemption_disabled+0x41/0x280
[  292.858726]  ? copy_msghdr_from_user+0x440/0x440
[  292.863487]  ? __fget+0x32f/0x510
[  292.866958]  ? lock_downgrade+0x720/0x720
[  292.871120]  ? check_preemption_disabled+0x41/0x280
[  292.876151]  ? check_preemption_disabled+0x41/0x280
[  292.881184]  ? __fget+0x356/0x510
[  292.884654]  ? do_dup2+0x450/0x450
[  292.888226]  ? lock_downgrade+0x720/0x720
[  292.892388]  ? vfs_write+0x3d7/0x540
[  292.896205]  ? __fdget+0x1d0/0x230
[  292.899761]  __x64_sys_sendmsg+0x132/0x220
[  292.904061]  ? __sys_sendmsg+0x1b0/0x1b0
[  292.908130]  ? vfs_write+0x393/0x540
[  292.911873]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  292.917248]  ? trace_hardirqs_off_caller+0x6e/0x210
[  292.922278]  ? do_syscall_64+0x21/0x620
[  292.926266]  do_syscall_64+0xf9/0x620
[  292.930086]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  292.935285] RIP: 0033:0x4665e9
[  292.938486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  292.957411] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.965142] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  292.972423] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  292.979705] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  292.986987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.994269] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  293.088743] IPv6: ADDRCONF(NETDEV_UP): veth108: link is not ready
15:06:13 executing program 2 (fault-call:6 fault-nth:4):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:13 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x89000}, 0x0, 0x60000fe})

15:06:13 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf003, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:13 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:13 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x14000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:13 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8a000}, 0x0, 0x60000fe})

15:06:13 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3a00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  293.250635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:13 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x19000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:13 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf303, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3f00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  293.369560] FAULT_INJECTION: forcing a failure.
[  293.369560] name failslab, interval 1, probability 0, space 0, times 0
[  293.418674] CPU: 0 PID: 15641 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  293.426578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  293.435934] Call Trace:
[  293.438544]  dump_stack+0x1fc/0x2ef
[  293.442187]  should_fail.cold+0xa/0xf
[  293.446000]  ? setup_fault_attr+0x200/0x200
[  293.450337]  ? lock_acquire+0x170/0x3c0
[  293.454320]  __should_failslab+0x115/0x180
[  293.458655]  should_failslab+0x5/0x10
[  293.462463]  kmem_cache_alloc_trace+0x284/0x380
[  293.467144]  netdevice_event+0x1ad/0x700
[  293.471213]  ? update_gid_event_work_handler+0xb0/0xb0
[  293.476499]  ? lock_acquire+0x170/0x3c0
[  293.480484]  ? _roce_del_all_netdev_gids+0x30/0x30
[  293.485421]  ? roce_gid_type_mask_support+0xf0/0xf0
[  293.490453]  ? dev_map_notification+0x31/0x3d0
[  293.495044]  ? qdisc_destroy+0x5c/0x790
[  293.499030]  notifier_call_chain+0xc0/0x230
[  293.503366]  dev_change_net_namespace+0x248/0xe00
[  293.508214]  ? apparmor_sb_mount+0x970/0x970
[  293.512627]  ? alloc_netdev_mqs+0xd50/0xd50
[  293.516960]  ? ns_capable+0xde/0x100
[  293.520680]  ? netlink_ns_capable+0xfd/0x130
[  293.525097]  do_setlink+0x192/0x3540
[  293.528822]  ? rtnl_fdb_add+0xa10/0xa10
[  293.532828]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  293.538022]  ? validate_nla+0x270/0x820
[  293.542007]  ? nla_parse+0x1b2/0x290
[  293.545729]  rtnl_newlink+0xda9/0x15c0
[  293.549632]  ? rtnl_getlink+0x620/0x620
[  293.553616]  ? __lock_acquire+0x6de/0x3ff0
[  293.557870]  ? mark_held_locks+0xf0/0xf0
[  293.561936]  ? __save_stack_trace+0x72/0x190
[  293.566350]  ? deref_stack_reg+0x134/0x1d0
[  293.570592]  ? mark_held_locks+0xf0/0xf0
[  293.574664]  ? mark_held_locks+0xf0/0xf0
[  293.578733]  ? __lock_acquire+0x6de/0x3ff0
[  293.582979]  ? free_one_page+0x12b/0x1080
[  293.587139]  ? lock_downgrade+0x720/0x720
[  293.591323]  ? free_one_page+0x12b/0x1080
[  293.595481]  ? trace_hardirqs_off+0x64/0x200
[  293.599900]  ? bad_range+0x114/0x3c0
[  293.603618]  ? __free_pages_ok+0x41a/0xd30
[  293.607864]  ? __lock_acquire+0x6de/0x3ff0
[  293.612107]  ? __free_pages_ok+0x54d/0xd30
[  293.616354]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  293.620947]  ? mark_held_locks+0xf0/0xf0
[  293.625021]  ? finish_task_switch+0x531/0x760
[  293.629555]  ? mutex_trylock+0x1a0/0x1a0
[  293.633623]  ? check_preemption_disabled+0x41/0x280
[  293.638645]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  293.643071]  ? rtnl_getlink+0x620/0x620
[  293.647049]  rtnetlink_rcv_msg+0x453/0xb80
[  293.651315]  ? rtnl_calcit.isra.0+0x430/0x430
[  293.655818]  ? memcpy+0x35/0x50
[  293.659279]  ? netdev_pick_tx+0x2f0/0x2f0
[  293.663434]  ? __copy_skb_header+0x414/0x500
[  293.667851]  ? kfree_skbmem+0x140/0x140
[  293.671818]  netlink_rcv_skb+0x160/0x440
[  293.675962]  ? rtnl_calcit.isra.0+0x430/0x430
[  293.680447]  ? netlink_ack+0xae0/0xae0
[  293.684340]  netlink_unicast+0x4d5/0x690
[  293.688394]  ? netlink_sendskb+0x110/0x110
[  293.692610]  ? _copy_from_iter_full+0x229/0x7c0
[  293.697277]  ? __phys_addr_symbol+0x2c/0x70
[  293.701768]  ? __check_object_size+0x17b/0x3e0
[  293.706401]  netlink_sendmsg+0x6bb/0xc40
[  293.710497]  ? aa_af_perm+0x230/0x230
[  293.714295]  ? nlmsg_notify+0x1a0/0x1a0
[  293.718267]  ? kernel_recvmsg+0x220/0x220
[  293.722583]  ? nlmsg_notify+0x1a0/0x1a0
[  293.726574]  sock_sendmsg+0xc3/0x120
[  293.730275]  ___sys_sendmsg+0x7bb/0x8e0
[  293.734246]  ? check_preemption_disabled+0x41/0x280
[  293.739258]  ? copy_msghdr_from_user+0x440/0x440
[  293.745308]  ? __fget+0x32f/0x510
[  293.748778]  ? lock_downgrade+0x720/0x720
[  293.752908]  ? check_preemption_disabled+0x41/0x280
[  293.757925]  ? check_preemption_disabled+0x41/0x280
[  293.762928]  ? __fget+0x356/0x510
[  293.766458]  ? do_dup2+0x450/0x450
[  293.769979]  ? lock_downgrade+0x720/0x720
[  293.774120]  ? vfs_write+0x3d7/0x540
[  293.777839]  ? __fdget+0x1d0/0x230
[  293.781364]  __x64_sys_sendmsg+0x132/0x220
[  293.785600]  ? __sys_sendmsg+0x1b0/0x1b0
[  293.789824]  ? vfs_write+0x393/0x540
[  293.793534]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  293.798893]  ? trace_hardirqs_off_caller+0x6e/0x210
[  293.803900]  ? do_syscall_64+0x21/0x620
[  293.807868]  do_syscall_64+0xf9/0x620
[  293.811670]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  293.816850] RIP: 0033:0x4665e9
[  293.820028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  293.838908] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.846615] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  293.853875] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  293.861134] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
15:06:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5c00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  293.868402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.875663] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  293.938790] IPv6: ADDRCONF(NETDEV_UP): veth109: link is not ready
15:06:13 executing program 2 (fault-call:6 fault-nth:5):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:13 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xfe03, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:13 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3f00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:13 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x28000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb301, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:13 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8b000}, 0x0, 0x60000fe})

[  294.122205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:14 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x53010000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:14 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8c000}, 0x0, 0x60000fe})

15:06:14 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff03, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:14 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc026, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  294.269879] FAULT_INJECTION: forcing a failure.
[  294.269879] name failslab, interval 1, probability 0, space 0, times 0
[  294.311829] CPU: 0 PID: 15713 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  294.319736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  294.329092] Call Trace:
[  294.331691]  dump_stack+0x1fc/0x2ef
[  294.335335]  should_fail.cold+0xa/0xf
[  294.339144]  ? setup_fault_attr+0x200/0x200
[  294.343472]  ? lock_acquire+0x170/0x3c0
[  294.347548]  __should_failslab+0x115/0x180
[  294.351794]  should_failslab+0x5/0x10
[  294.355602]  kmem_cache_alloc_node+0x245/0x3b0
[  294.360194]  __alloc_skb+0x71/0x560
[  294.363832]  inet_netconf_notify_devconf+0xdd/0x250
[  294.368857]  inetdev_event+0x728/0x1270
[  294.372847]  ? lock_downgrade+0x720/0x720
[  294.377007]  ? devinet_init_net+0x470/0x470
[  294.381336]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[  294.386444]  ? skb_dequeue+0x125/0x180
[  294.390356]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  294.395558]  notifier_call_chain+0xc0/0x230
[  294.399943]  dev_change_net_namespace+0x248/0xe00
[  294.404793]  ? apparmor_sb_mount+0x970/0x970
[  294.406644] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  294.409206]  ? alloc_netdev_mqs+0xd50/0xd50
[  294.409231]  ? ns_capable+0xde/0x100
[  294.409247]  ? netlink_ns_capable+0xfd/0x130
[  294.431693]  do_setlink+0x192/0x3540
[  294.435428]  ? rtnl_fdb_add+0xa10/0xa10
[  294.436938] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  294.439429]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  294.439452]  ? validate_nla+0x270/0x820
[  294.455337]  ? nla_parse+0x1b2/0x290
[  294.459063]  rtnl_newlink+0xda9/0x15c0
[  294.462959]  ? rtnl_getlink+0x620/0x620
[  294.466947]  ? __lock_acquire+0x6de/0x3ff0
[  294.468160] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  294.471190]  ? __save_stack_trace+0x72/0x190
[  294.471206]  ? deref_stack_reg+0x134/0x1d0
[  294.471220]  ? mark_held_locks+0xf0/0xf0
[  294.471238]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  294.503221]  ? mark_held_locks+0xf0/0xf0
[  294.507300]  ? __lock_acquire+0x6de/0x3ff0
[  294.511550]  ? __update_load_avg_se+0x5ec/0xa00
[  294.516228]  ? mark_held_locks+0xf0/0xf0
[  294.520306]  ? __lock_acquire+0x6de/0x3ff0
[  294.521607] cgroup: cgroup2: unknown option "upperdir=./file1"
[  294.524560]  ? mark_held_locks+0xf0/0xf0
[  294.524578]  ? _raw_spin_unlock_irq+0x24/0x80
[  294.524592]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  294.524607]  ? _raw_spin_unlock_irq+0x5a/0x80
[  294.524620]  ? finish_task_switch+0x146/0x760
[  294.524630]  ? finish_task_switch+0x118/0x760
[  294.524676]  ? mutex_trylock+0x1a0/0x1a0
[  294.524691]  ? check_preemption_disabled+0x41/0x280
[  294.524706]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  294.524728]  ? rtnl_getlink+0x620/0x620
[  294.574680]  rtnetlink_rcv_msg+0x453/0xb80
[  294.578931]  ? rtnl_calcit.isra.0+0x430/0x430
[  294.583446]  ? memcpy+0x35/0x50
[  294.586733]  ? netdev_pick_tx+0x2f0/0x2f0
[  294.590935]  ? __copy_skb_header+0x414/0x500
[  294.595352]  ? kfree_skbmem+0x140/0x140
[  294.599344]  netlink_rcv_skb+0x160/0x440
[  294.603413]  ? rtnl_calcit.isra.0+0x430/0x430
[  294.607916]  ? netlink_ack+0xae0/0xae0
15:06:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc126, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  294.611822]  netlink_unicast+0x4d5/0x690
[  294.615891]  ? netlink_sendskb+0x110/0x110
[  294.620133]  ? _copy_from_iter_full+0x229/0x7c0
[  294.624809]  ? __phys_addr_symbol+0x2c/0x70
[  294.629133]  ? __check_object_size+0x17b/0x3e0
[  294.633723]  netlink_sendmsg+0x6bb/0xc40
[  294.637791]  ? aa_af_perm+0x230/0x230
[  294.641591]  ? nlmsg_notify+0x1a0/0x1a0
[  294.645570]  ? kernel_recvmsg+0x220/0x220
[  294.649730]  ? nlmsg_notify+0x1a0/0x1a0
[  294.653699]  sock_sendmsg+0xc3/0x120
[  294.657410]  ___sys_sendmsg+0x7bb/0x8e0
[  294.661378]  ? check_preemption_disabled+0x41/0x280
[  294.666425]  ? copy_msghdr_from_user+0x440/0x440
[  294.671182]  ? __fget+0x32f/0x510
[  294.674631]  ? lock_downgrade+0x720/0x720
[  294.678769]  ? check_preemption_disabled+0x41/0x280
[  294.683771]  ? check_preemption_disabled+0x41/0x280
[  294.688776]  ? __fget+0x356/0x510
[  294.692236]  ? do_dup2+0x450/0x450
[  294.695785]  ? lock_downgrade+0x720/0x720
[  294.699934]  ? vfs_write+0x3d7/0x540
[  294.703632]  ? __fdget+0x1d0/0x230
[  294.707160]  __x64_sys_sendmsg+0x132/0x220
[  294.711378]  ? __sys_sendmsg+0x1b0/0x1b0
[  294.715524]  ? vfs_write+0x393/0x540
[  294.719239]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  294.724599]  ? trace_hardirqs_off_caller+0x6e/0x210
[  294.729604]  ? do_syscall_64+0x21/0x620
[  294.733560]  do_syscall_64+0xf9/0x620
[  294.737360]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  294.742538] RIP: 0033:0x4665e9
[  294.745817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  294.764715] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  294.772427] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  294.779691] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  294.786943] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  294.794202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  294.801465] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  294.878107] cgroup: cgroup2: unknown option "upperdir=./file1"
[  294.887169] IPv6: ADDRCONF(NETDEV_UP): veth110: link is not ready
15:06:14 executing program 2 (fault-call:6 fault-nth:6):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:14 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff0f, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:14 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5c00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:14 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x60000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:14 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8d000}, 0x0, 0x60000fe})

15:06:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:15 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x9effffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  295.060192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:15 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8e000}, 0x0, 0x60000fe})

15:06:15 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x40000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:15 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:15 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb301, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  295.179196] FAULT_INJECTION: forcing a failure.
[  295.179196] name failslab, interval 1, probability 0, space 0, times 0
[  295.242506] CPU: 1 PID: 15783 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  295.250435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  295.259794] Call Trace:
[  295.262391]  dump_stack+0x1fc/0x2ef
[  295.266031]  should_fail.cold+0xa/0xf
[  295.269845]  ? setup_fault_attr+0x200/0x200
[  295.274178]  ? lock_acquire+0x170/0x3c0
[  295.278168]  __should_failslab+0x115/0x180
[  295.282408]  should_failslab+0x5/0x10
[  295.286309]  kmem_cache_alloc_node_trace+0x244/0x3b0
[  295.291426]  __kmalloc_node_track_caller+0x38/0x70
[  295.296375]  __alloc_skb+0xae/0x560
[  295.300019]  inet_netconf_notify_devconf+0xdd/0x250
[  295.305051]  inetdev_event+0x728/0x1270
[  295.309033]  ? lock_downgrade+0x720/0x720
[  295.313208]  ? devinet_init_net+0x470/0x470
[  295.317538]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[  295.322648]  ? skb_dequeue+0x125/0x180
[  295.326541]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  295.331742]  notifier_call_chain+0xc0/0x230
[  295.336086]  dev_change_net_namespace+0x248/0xe00
[  295.340940]  ? apparmor_sb_mount+0x970/0x970
[  295.345357]  ? alloc_netdev_mqs+0xd50/0xd50
[  295.349690]  ? ns_capable+0xde/0x100
[  295.353414]  ? netlink_ns_capable+0xfd/0x130
[  295.357830]  do_setlink+0x192/0x3540
[  295.361559]  ? rtnl_fdb_add+0xa10/0xa10
[  295.365568]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  295.370852]  ? validate_nla+0x270/0x820
[  295.374839]  ? nla_parse+0x1b2/0x290
[  295.378566]  rtnl_newlink+0xda9/0x15c0
[  295.382450]  ? rtnl_getlink+0x620/0x620
[  295.386412]  ? __lock_acquire+0x6de/0x3ff0
[  295.390665]  ? __lock_acquire+0x6de/0x3ff0
[  295.394905]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  295.400780]  ? mark_held_locks+0xf0/0xf0
[  295.404836]  ? __lock_acquire+0x6de/0x3ff0
[  295.409057]  ? __update_load_avg_se+0x5ec/0xa00
[  295.413719]  ? mark_held_locks+0xf0/0xf0
[  295.417810]  ? __lock_acquire+0x6de/0x3ff0
[  295.422052]  ? mark_held_locks+0xf0/0xf0
[  295.426102]  ? _raw_spin_unlock_irq+0x24/0x80
[  295.430578]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  295.435196]  ? _raw_spin_unlock_irq+0x5a/0x80
[  295.439705]  ? finish_task_switch+0x146/0x760
[  295.444192]  ? finish_task_switch+0x118/0x760
[  295.448687]  ? mutex_trylock+0x1a0/0x1a0
[  295.452739]  ? check_preemption_disabled+0x41/0x280
[  295.457741]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  295.462134]  ? rtnl_getlink+0x620/0x620
[  295.466089]  rtnetlink_rcv_msg+0x453/0xb80
[  295.470305]  ? rtnl_calcit.isra.0+0x430/0x430
[  295.474792]  ? memcpy+0x35/0x50
[  295.478059]  ? netdev_pick_tx+0x2f0/0x2f0
[  295.482192]  ? __copy_skb_header+0x414/0x500
[  295.486598]  ? kfree_skbmem+0x140/0x140
[  295.490556]  netlink_rcv_skb+0x160/0x440
[  295.494610]  ? rtnl_calcit.isra.0+0x430/0x430
[  295.499091]  ? netlink_ack+0xae0/0xae0
[  295.502965]  netlink_unicast+0x4d5/0x690
[  295.507033]  ? netlink_sendskb+0x110/0x110
[  295.511680]  ? _copy_from_iter_full+0x229/0x7c0
[  295.516332]  ? __phys_addr_symbol+0x2c/0x70
[  295.520640]  ? __check_object_size+0x17b/0x3e0
[  295.525203]  netlink_sendmsg+0x6bb/0xc40
[  295.529263]  ? aa_af_perm+0x230/0x230
[  295.533141]  ? nlmsg_notify+0x1a0/0x1a0
[  295.537100]  ? kernel_recvmsg+0x220/0x220
[  295.541245]  ? nlmsg_notify+0x1a0/0x1a0
[  295.545208]  sock_sendmsg+0xc3/0x120
[  295.549166]  ___sys_sendmsg+0x7bb/0x8e0
[  295.553127]  ? check_preemption_disabled+0x41/0x280
[  295.558127]  ? copy_msghdr_from_user+0x440/0x440
[  295.562864]  ? __fget+0x32f/0x510
[  295.566311]  ? lock_downgrade+0x720/0x720
[  295.570483]  ? check_preemption_disabled+0x41/0x280
[  295.575482]  ? check_preemption_disabled+0x41/0x280
[  295.580483]  ? __fget+0x356/0x510
[  295.583922]  ? do_dup2+0x450/0x450
[  295.587454]  ? lock_downgrade+0x720/0x720
[  295.591587]  ? vfs_write+0x3d7/0x540
[  295.595286]  ? __fdget+0x1d0/0x230
[  295.598814]  __x64_sys_sendmsg+0x132/0x220
[  295.603027]  ? __sys_sendmsg+0x1b0/0x1b0
[  295.607065]  ? vfs_write+0x393/0x540
[  295.610762]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  295.616121]  ? trace_hardirqs_off_caller+0x6e/0x210
[  295.621138]  ? do_syscall_64+0x21/0x620
[  295.625095]  do_syscall_64+0xf9/0x620
[  295.628881]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  295.634054] RIP: 0033:0x4665e9
[  295.637276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  295.656165] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.663889] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  295.671142] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  295.678437] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  295.685775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
15:06:15 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  295.693036] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  295.842182] IPv6: ADDRCONF(NETDEV_UP): veth111: link is not ready
15:06:15 executing program 2 (fault-call:6 fault-nth:7):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:15 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1fffff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:15 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc026, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:15 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff01, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:15 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xa8000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:15 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x8f000}, 0x0, 0x60000fe})

[  295.945349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  295.966670] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:15 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  296.013887] cgroup: cgroup2: unknown option "upperdir=./file1"
[  296.040633] FAULT_INJECTION: forcing a failure.
[  296.040633] name failslab, interval 1, probability 0, space 0, times 0
[  296.085561] CPU: 0 PID: 15852 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  296.093475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  296.099570] overlayfs: missing 'workdir'
[  296.103024] Call Trace:
[  296.103049]  dump_stack+0x1fc/0x2ef
[  296.103087]  should_fail.cold+0xa/0xf
[  296.103107]  ? setup_fault_attr+0x200/0x200
[  296.103123]  ? lock_acquire+0x170/0x3c0
[  296.103141]  __should_failslab+0x115/0x180
[  296.129849]  should_failslab+0x5/0x10
[  296.133658]  kmem_cache_alloc_node+0x245/0x3b0
[  296.138352]  __alloc_skb+0x71/0x560
[  296.141992]  inet6_netconf_notify_devconf+0xa0/0x1d0
[  296.147113]  addrconf_sysctl_unregister+0x131/0x1c0
[  296.148356] overlayfs: missing 'workdir'
[  296.152137]  addrconf_ifdown.isra.0+0xea0/0x1320
[  296.152161]  ? add_addr+0x270/0x270
[  296.152186]  addrconf_notify+0x568/0x21f0
[  296.152204]  ? mark_held_locks+0xa6/0xf0
[  296.152222]  ? get_netdev_for_sock+0x430/0x430
[  296.177502]  ? lockdep_hardirqs_on+0x3a8/0x5c0
15:06:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:16 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff0f, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  296.182092]  ? inet6_ifinfo_notify+0x140/0x140
[  296.186676]  ? clusterip_netdev_event+0x46f/0x640
[  296.191522]  ? tee_netdev_event+0x412/0x5b0
[  296.195853]  ? ip6mr_device_event+0x1ab/0x220
[  296.200357]  notifier_call_chain+0xc0/0x230
[  296.204684]  dev_change_net_namespace+0x248/0xe00
[  296.209532]  ? apparmor_sb_mount+0x970/0x970
[  296.213950]  ? alloc_netdev_mqs+0xd50/0xd50
[  296.218285]  ? ns_capable+0xde/0x100
[  296.222012]  ? netlink_ns_capable+0xfd/0x130
[  296.226429]  do_setlink+0x192/0x3540
[  296.230157]  ? rtnl_fdb_add+0xa10/0xa10
[  296.234166]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  296.239360]  ? validate_nla+0x270/0x820
[  296.243439]  ? nla_parse+0x1b2/0x290
[  296.247163]  rtnl_newlink+0xda9/0x15c0
[  296.251070]  ? rtnl_getlink+0x620/0x620
[  296.255060]  ? __lock_acquire+0x6de/0x3ff0
[  296.259308]  ? __save_stack_trace+0x72/0x190
[  296.263716]  ? deref_stack_reg+0x134/0x1d0
[  296.267956]  ? mark_held_locks+0xf0/0xf0
[  296.272022]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  296.277916]  ? mark_held_locks+0xf0/0xf0
[  296.281990]  ? __lock_acquire+0x6de/0x3ff0
15:06:16 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc126, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  296.286323]  ? __update_load_avg_se+0x5ec/0xa00
[  296.291085]  ? mark_held_locks+0xf0/0xf0
[  296.295194]  ? __lock_acquire+0x6de/0x3ff0
[  296.299628]  ? mark_held_locks+0xf0/0xf0
[  296.303694]  ? _raw_spin_unlock_irq+0x24/0x80
[  296.308194]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  296.312789]  ? _raw_spin_unlock_irq+0x5a/0x80
[  296.317289]  ? finish_task_switch+0x146/0x760
[  296.321873]  ? finish_task_switch+0x118/0x760
[  296.326416]  ? mutex_trylock+0x1a0/0x1a0
[  296.330485]  ? check_preemption_disabled+0x41/0x280
[  296.335505]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  296.339937]  ? rtnl_getlink+0x620/0x620
[  296.343918]  rtnetlink_rcv_msg+0x453/0xb80
[  296.348158]  ? rtnl_calcit.isra.0+0x430/0x430
[  296.350717] overlayfs: missing 'workdir'
[  296.352681]  ? memcpy+0x35/0x50
[  296.352698]  ? netdev_pick_tx+0x2f0/0x2f0
[  296.352714]  ? __copy_skb_header+0x414/0x500
[  296.352727]  ? kfree_skbmem+0x140/0x140
[  296.352745]  netlink_rcv_skb+0x160/0x440
[  296.361186] overlayfs: missing 'workdir'
[  296.364206]  ? rtnl_calcit.isra.0+0x430/0x430
15:06:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  296.364225]  ? netlink_ack+0xae0/0xae0
[  296.364252]  netlink_unicast+0x4d5/0x690
[  296.364269]  ? netlink_sendskb+0x110/0x110
[  296.364284]  ? _copy_from_iter_full+0x229/0x7c0
[  296.364297]  ? __phys_addr_symbol+0x2c/0x70
[  296.364313]  ? __check_object_size+0x17b/0x3e0
[  296.364330]  netlink_sendmsg+0x6bb/0xc40
[  296.364346]  ? aa_af_perm+0x230/0x230
[  296.364357]  ? nlmsg_notify+0x1a0/0x1a0
[  296.364376]  ? kernel_recvmsg+0x220/0x220
[  296.427731]  ? nlmsg_notify+0x1a0/0x1a0
[  296.431819]  sock_sendmsg+0xc3/0x120
[  296.435650]  ___sys_sendmsg+0x7bb/0x8e0
[  296.439750]  ? check_preemption_disabled+0x41/0x280
[  296.444779]  ? copy_msghdr_from_user+0x440/0x440
[  296.449547]  ? __fget+0x32f/0x510
[  296.453013]  ? lock_downgrade+0x720/0x720
[  296.457163]  ? check_preemption_disabled+0x41/0x280
[  296.462190]  ? check_preemption_disabled+0x41/0x280
[  296.467219]  ? __fget+0x356/0x510
[  296.470683]  ? do_dup2+0x450/0x450
[  296.474234]  ? lock_downgrade+0x720/0x720
[  296.478393]  ? vfs_write+0x3d7/0x540
[  296.482287]  ? __fdget+0x1d0/0x230
[  296.485839]  __x64_sys_sendmsg+0x132/0x220
[  296.489044] overlayfs: missing 'workdir'
[  296.490074]  ? __sys_sendmsg+0x1b0/0x1b0
[  296.490091]  ? vfs_write+0x393/0x540
[  296.490117]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  296.490136]  ? trace_hardirqs_off_caller+0x6e/0x210
[  296.499914] overlayfs: missing 'workdir'
[  296.501928]  ? do_syscall_64+0x21/0x620
[  296.501947]  do_syscall_64+0xf9/0x620
[  296.501968]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  296.501982] RIP: 0033:0x4665e9
15:06:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  296.533086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  296.551988] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  296.559701] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  296.566976] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  296.574247] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  296.581523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  296.588793] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  296.592497] overlayfs: missing 'workdir'
[  296.631024] overlayfs: missing 'workdir'
[  296.653639] cgroup: cgroup2: unknown option "upperdir=./file1"
[  296.683217] IPv6: ADDRCONF(NETDEV_UP): veth112: link is not ready
[  296.699872] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:16 executing program 2 (fault-call:6 fault-nth:8):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:16 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xc8000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:16 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x20000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:16 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:16 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xe0ff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:16 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x90000}, 0x0, 0x60000fe})

[  296.866185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  296.905949] overlayfs: missing 'workdir'
15:06:16 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xf0ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  296.913357] cgroup: cgroup2: unknown option "upperdir=./file1"
15:06:16 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x91000}, 0x0, 0x60000fe})

[  296.950597] overlayfs: missing 'workdir'
[  296.983185] FAULT_INJECTION: forcing a failure.
[  296.983185] name failslab, interval 1, probability 0, space 0, times 0
[  296.983515] cgroup: cgroup2: unknown option "upperdir=./file1"
[  297.019988] CPU: 0 PID: 15929 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  297.027893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  297.037246] Call Trace:
[  297.039847]  dump_stack+0x1fc/0x2ef
[  297.043484]  should_fail.cold+0xa/0xf
[  297.047307]  ? setup_fault_attr+0x200/0x200
[  297.051633]  ? lock_acquire+0x170/0x3c0
[  297.055704]  __should_failslab+0x115/0x180
[  297.059946]  should_failslab+0x5/0x10
[  297.063758]  kmem_cache_alloc_node_trace+0x244/0x3b0
[  297.068871]  __kmalloc_node_track_caller+0x38/0x70
[  297.073809]  __alloc_skb+0xae/0x560
[  297.077448]  inet6_netconf_notify_devconf+0xa0/0x1d0
[  297.082570]  addrconf_sysctl_unregister+0x131/0x1c0
[  297.087596]  addrconf_ifdown.isra.0+0xea0/0x1320
[  297.092361]  ? add_addr+0x270/0x270
[  297.096179]  addrconf_notify+0x568/0x21f0
[  297.100337]  ? mark_held_locks+0xa6/0xf0
[  297.104407]  ? get_netdev_for_sock+0x430/0x430
[  297.108995]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  297.113590]  ? inet6_ifinfo_notify+0x140/0x140
[  297.118187]  ? clusterip_netdev_event+0x46f/0x640
[  297.123033]  ? tee_netdev_event+0x412/0x5b0
[  297.127488]  ? ip6mr_device_event+0x1ab/0x220
15:06:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x40000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:17 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xedc0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  297.131995]  notifier_call_chain+0xc0/0x230
[  297.136328]  dev_change_net_namespace+0x248/0xe00
[  297.141180]  ? apparmor_sb_mount+0x970/0x970
[  297.145598]  ? alloc_netdev_mqs+0xd50/0xd50
[  297.150019]  ? ns_capable+0xde/0x100
[  297.153746]  ? netlink_ns_capable+0xfd/0x130
[  297.158167]  do_setlink+0x192/0x3540
[  297.161894]  ? rtnl_fdb_add+0xa10/0xa10
[  297.165905]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  297.171103]  ? validate_nla+0x270/0x820
[  297.175085]  ? nla_parse+0x1b2/0x290
[  297.178809]  rtnl_newlink+0xda9/0x15c0
[  297.182699]  ? rtnl_getlink+0x620/0x620
[  297.186673]  ? __lock_acquire+0x6de/0x3ff0
[  297.190900]  ? __save_stack_trace+0x72/0x190
[  297.195301]  ? deref_stack_reg+0x134/0x1d0
[  297.199619]  ? mark_held_locks+0xf0/0xf0
[  297.203671]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  297.209545]  ? mark_held_locks+0xf0/0xf0
[  297.213588]  ? __lock_acquire+0x6de/0x3ff0
[  297.217824]  ? __update_load_avg_se+0x5ec/0xa00
[  297.222487]  ? mark_held_locks+0xf0/0xf0
[  297.226541]  ? __lock_acquire+0x6de/0x3ff0
[  297.230773]  ? mark_held_locks+0xf0/0xf0
[  297.234824]  ? _raw_spin_unlock_irq+0x24/0x80
[  297.239313]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  297.243888]  ? _raw_spin_unlock_irq+0x5a/0x80
[  297.248373]  ? finish_task_switch+0x146/0x760
[  297.252862]  ? finish_task_switch+0x118/0x760
[  297.257397]  ? mutex_trylock+0x1a0/0x1a0
[  297.261455]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  297.265856]  ? rtnl_getlink+0x620/0x620
[  297.269854]  rtnetlink_rcv_msg+0x453/0xb80
[  297.274089]  ? rtnl_calcit.isra.0+0x430/0x430
[  297.278583]  ? memcpy+0x35/0x50
[  297.281891]  ? netdev_pick_tx+0x2f0/0x2f0
[  297.286054]  ? __copy_skb_header+0x414/0x500
[  297.290446]  ? kfree_skbmem+0x140/0x140
[  297.294417]  netlink_rcv_skb+0x160/0x440
[  297.298477]  ? rtnl_calcit.isra.0+0x430/0x430
[  297.302954]  ? netlink_ack+0xae0/0xae0
[  297.306841]  netlink_unicast+0x4d5/0x690
[  297.310886]  ? netlink_sendskb+0x110/0x110
[  297.315113]  ? _copy_from_iter_full+0x229/0x7c0
[  297.319774]  ? __phys_addr_symbol+0x2c/0x70
[  297.324080]  ? __check_object_size+0x17b/0x3e0
[  297.328660]  netlink_sendmsg+0x6bb/0xc40
[  297.332705]  ? aa_af_perm+0x230/0x230
[  297.336499]  ? nlmsg_notify+0x1a0/0x1a0
[  297.340472]  ? kernel_recvmsg+0x220/0x220
[  297.344613]  ? nlmsg_notify+0x1a0/0x1a0
[  297.348571]  sock_sendmsg+0xc3/0x120
[  297.352270]  ___sys_sendmsg+0x7bb/0x8e0
[  297.356238]  ? check_preemption_disabled+0x41/0x280
[  297.361248]  ? copy_msghdr_from_user+0x440/0x440
[  297.365990]  ? __fget+0x32f/0x510
[  297.369429]  ? lock_downgrade+0x720/0x720
[  297.373561]  ? check_preemption_disabled+0x41/0x280
[  297.378566]  ? check_preemption_disabled+0x41/0x280
[  297.383581]  ? __fget+0x356/0x510
[  297.387027]  ? do_dup2+0x450/0x450
[  297.390546]  ? lock_downgrade+0x720/0x720
[  297.394690]  ? vfs_write+0x3d7/0x540
[  297.398397]  ? __fdget+0x1d0/0x230
[  297.401930]  __x64_sys_sendmsg+0x132/0x220
[  297.406146]  ? __sys_sendmsg+0x1b0/0x1b0
[  297.410209]  ? vfs_write+0x393/0x540
[  297.413973]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  297.419332]  ? trace_hardirqs_off_caller+0x6e/0x210
[  297.424343]  ? do_syscall_64+0x21/0x620
[  297.428404]  do_syscall_64+0xf9/0x620
[  297.432214]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  297.437425] RIP: 0033:0x4665e9
[  297.440683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  297.459692] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  297.467398] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  297.474661] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
15:06:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  297.481941] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  297.489279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.496536] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  297.544396] overlayfs: missing 'workdir'
15:06:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7ff00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  297.576697] IPv6: ADDRCONF(NETDEV_UP): veth113: link is not ready
[  297.583961] overlayfs: missing 'workdir'
15:06:17 executing program 2 (fault-call:6 fault-nth:9):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:17 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:17 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x92000}, 0x0, 0x60000fe})

15:06:17 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xf5ffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  297.744366] overlayfs: missing 'workdir'
[  297.757370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:17 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x93000}, 0x0, 0x60000fe})

15:06:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x100000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:17 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xfffff000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  297.790332] overlayfs: missing 'workdir'
15:06:17 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1fffff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  297.887462] FAULT_INJECTION: forcing a failure.
[  297.887462] name failslab, interval 1, probability 0, space 0, times 0
[  297.936921] CPU: 0 PID: 15985 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  297.944828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  297.954190] Call Trace:
[  297.956784]  dump_stack+0x1fc/0x2ef
[  297.960450]  should_fail.cold+0xa/0xf
[  297.964399]  ? setup_fault_attr+0x200/0x200
[  297.968736]  ? lock_acquire+0x170/0x3c0
[  297.972726]  __should_failslab+0x115/0x180
[  297.976971]  should_failslab+0x5/0x10
[  297.980779]  kmem_cache_alloc_node+0x245/0x3b0
[  297.985375]  __alloc_skb+0x71/0x560
[  297.989024]  mpls_netconf_notify_devconf+0x4a/0x110
[  297.994053]  mpls_dev_notify+0x6e2/0x9b0
[  297.998126]  notifier_call_chain+0xc0/0x230
[  298.002461]  dev_change_net_namespace+0x248/0xe00
[  298.007310]  ? apparmor_sb_mount+0x970/0x970
[  298.011735]  ? alloc_netdev_mqs+0xd50/0xd50
[  298.016076]  ? ns_capable+0xde/0x100
[  298.019801]  ? netlink_ns_capable+0xfd/0x130
[  298.024223]  do_setlink+0x192/0x3540
[  298.027958]  ? rtnl_fdb_add+0xa10/0xa10
[  298.031969]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  298.037167]  ? validate_nla+0x270/0x820
[  298.041151]  ? nla_parse+0x1b2/0x290
[  298.044885]  rtnl_newlink+0xda9/0x15c0
[  298.048790]  ? rtnl_getlink+0x620/0x620
[  298.052787]  ? __lock_acquire+0x6de/0x3ff0
[  298.057033]  ? __save_stack_trace+0x72/0x190
[  298.061622]  ? deref_stack_reg+0x134/0x1d0
[  298.065865]  ? mark_held_locks+0xf0/0xf0
[  298.069936]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  298.075830]  ? mark_held_locks+0xf0/0xf0
[  298.079900]  ? __lock_acquire+0x6de/0x3ff0
[  298.080771] overlayfs: missing 'workdir'
[  298.084144]  ? __update_load_avg_se+0x5ec/0xa00
[  298.084164]  ? mark_held_locks+0xf0/0xf0
[  298.084186]  ? __lock_acquire+0x6de/0x3ff0
[  298.084211]  ? mark_held_locks+0xf0/0xf0
[  298.084225]  ? _raw_spin_unlock_irq+0x24/0x80
[  298.084241]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  298.084255]  ? _raw_spin_unlock_irq+0x5a/0x80
[  298.084266]  ? finish_task_switch+0x146/0x760
[  298.084282]  ? finish_task_switch+0x118/0x760
[  298.093062] overlayfs: missing 'workdir'
[  298.097064]  ? mutex_trylock+0x1a0/0x1a0
[  298.097082]  ? check_preemption_disabled+0x41/0x280
[  298.097100]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  298.097127]  ? rtnl_getlink+0x620/0x620
[  298.097140]  rtnetlink_rcv_msg+0x453/0xb80
[  298.097158]  ? rtnl_calcit.isra.0+0x430/0x430
[  298.097174]  ? memcpy+0x35/0x50
[  298.097187]  ? netdev_pick_tx+0x2f0/0x2f0
[  298.097200]  ? __copy_skb_header+0x414/0x500
[  298.097217]  ? kfree_skbmem+0x140/0x140
[  298.174124]  netlink_rcv_skb+0x160/0x440
[  298.178199]  ? rtnl_calcit.isra.0+0x430/0x430
[  298.182711]  ? netlink_ack+0xae0/0xae0
15:06:18 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff01, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  298.186617]  netlink_unicast+0x4d5/0x690
[  298.190684]  ? netlink_sendskb+0x110/0x110
[  298.194933]  ? _copy_from_iter_full+0x229/0x7c0
[  298.199607]  ? __phys_addr_symbol+0x2c/0x70
[  298.204021]  ? __check_object_size+0x17b/0x3e0
[  298.208609]  netlink_sendmsg+0x6bb/0xc40
[  298.212678]  ? aa_af_perm+0x230/0x230
[  298.216487]  ? nlmsg_notify+0x1a0/0x1a0
[  298.220465]  ? kernel_recvmsg+0x220/0x220
[  298.224628]  ? nlmsg_notify+0x1a0/0x1a0
[  298.228617]  sock_sendmsg+0xc3/0x120
[  298.232339]  ___sys_sendmsg+0x7bb/0x8e0
[  298.236321]  ? check_preemption_disabled+0x41/0x280
[  298.241350]  ? copy_msghdr_from_user+0x440/0x440
[  298.246114]  ? __fget+0x32f/0x510
[  298.249574]  ? lock_downgrade+0x720/0x720
[  298.253736]  ? check_preemption_disabled+0x41/0x280
[  298.258756]  ? check_preemption_disabled+0x41/0x280
[  298.263777]  ? __fget+0x356/0x510
[  298.267235]  ? do_dup2+0x450/0x450
[  298.270769]  ? lock_downgrade+0x720/0x720
[  298.274902]  ? vfs_write+0x3d7/0x540
[  298.278610]  ? __fdget+0x1d0/0x230
[  298.282158]  __x64_sys_sendmsg+0x132/0x220
[  298.286398]  ? __sys_sendmsg+0x1b0/0x1b0
[  298.290451]  ? vfs_write+0x393/0x540
[  298.294172]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  298.299552]  ? trace_hardirqs_off_caller+0x6e/0x210
[  298.304564]  ? do_syscall_64+0x21/0x620
[  298.308531]  do_syscall_64+0xf9/0x620
[  298.312318]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  298.317487] RIP: 0033:0x4665e9
[  298.320661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  298.339545] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.347245] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  298.354508] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  298.361761] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  298.369016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  298.376275] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  298.442218] IPv6: ADDRCONF(NETDEV_UP): veth114: link is not ready
15:06:18 executing program 2 (fault-call:6 fault-nth:10):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:18 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:18 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff0f, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:18 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:18 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xffffff7f}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:18 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x94000}, 0x0, 0x60000fe})

15:06:18 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xffffff9e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  298.637265] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  298.665591] overlayfs: missing 'workdir'
15:06:18 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xffe0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:18 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x95000}, 0x0, 0x60000fe})

[  298.708740] overlayfs: missing 'workdir'
[  298.743346] FAULT_INJECTION: forcing a failure.
[  298.743346] name failslab, interval 1, probability 0, space 0, times 0
[  298.786683] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  298.793053] CPU: 0 PID: 16059 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  298.804641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  298.813997] Call Trace:
[  298.815406] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  298.816587]  dump_stack+0x1fc/0x2ef
[  298.816607]  should_fail.cold+0xa/0xf
[  298.816625]  ? setup_fault_attr+0x200/0x200
[  298.835069]  ? lock_acquire+0x170/0x3c0
[  298.839060]  __should_failslab+0x115/0x180
[  298.843306]  should_failslab+0x5/0x10
[  298.847111]  kmem_cache_alloc_node_trace+0x244/0x3b0
[  298.852225]  __kmalloc_node_track_caller+0x38/0x70
[  298.857164]  __alloc_skb+0xae/0x560
[  298.860807]  mpls_netconf_notify_devconf+0x4a/0x110
[  298.865834]  mpls_dev_notify+0x6e2/0x9b0
[  298.869905]  notifier_call_chain+0xc0/0x230
[  298.874236]  dev_change_net_namespace+0x248/0xe00
[  298.879080]  ? apparmor_sb_mount+0x970/0x970
15:06:18 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf0ffff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  298.883501]  ? alloc_netdev_mqs+0xd50/0xd50
[  298.887836]  ? ns_capable+0xde/0x100
[  298.891554]  ? netlink_ns_capable+0xfd/0x130
[  298.895979]  do_setlink+0x192/0x3540
[  298.899708]  ? rtnl_fdb_add+0xa10/0xa10
[  298.903719]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  298.908916]  ? validate_nla+0x270/0x820
[  298.912905]  ? nla_parse+0x1b2/0x290
[  298.916627]  rtnl_newlink+0xda9/0x15c0
[  298.920531]  ? rtnl_getlink+0x620/0x620
[  298.924524]  ? __save_stack_trace+0x72/0x190
[  298.928945]  ? deref_stack_reg+0x134/0x1d0
[  298.933185]  ? mark_held_locks+0xf0/0xf0
[  298.937253]  ? unwind_next_frame+0xeee/0x1400
[  298.941752]  ? __save_stack_trace+0x72/0x190
[  298.946163]  ? deref_stack_reg+0x134/0x1d0
[  298.950407]  ? get_reg+0x176/0x1f0
[  298.953954]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  298.959837]  ? deref_stack_reg+0x1d0/0x1d0
[  298.964072]  ? is_bpf_text_address+0xd5/0x1b0
[  298.968564]  ? lock_downgrade+0x720/0x720
[  298.972695]  ? lock_acquire+0x170/0x3c0
[  298.976655]  ? __bpf_address_lookup+0x330/0x330
[  298.981309]  ? check_preemption_disabled+0x41/0x280
[  298.986324]  ? is_bpf_text_address+0xfc/0x1b0
[  298.990815]  ? kernel_text_address+0xbd/0xf0
[  298.995208]  ? __kernel_text_address+0x9/0x30
[  298.999690]  ? unwind_get_return_address+0x51/0x90
[  299.004620]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  299.009983]  ? __lock_acquire+0x6de/0x3ff0
[  299.014224]  ? __kasan_slab_free+0x186/0x1f0
[  299.018623]  ? kmem_cache_free+0x7f/0x260
[  299.022754]  ? kfree_skbmem+0xc1/0x140
[  299.026633]  ? mark_held_locks+0xf0/0xf0
[  299.030687]  ? __dev_queue_xmit+0x269d/0x2e00
[  299.035186]  ? netlink_deliver_tap+0x8fb/0xb00
[  299.039755]  ? netlink_unicast+0x545/0x690
[  299.043977]  ? netlink_sendmsg+0x6bb/0xc40
[  299.048332]  ? sock_sendmsg+0xc3/0x120
[  299.052204]  ? ___sys_sendmsg+0x7bb/0x8e0
[  299.056331]  ? __x64_sys_sendmsg+0x132/0x220
[  299.060722]  ? do_syscall_64+0xf9/0x620
[  299.064690]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  299.070062]  ? mutex_trylock+0x1a0/0x1a0
[  299.074120]  ? check_preemption_disabled+0x41/0x280
[  299.079129]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  299.083545]  ? rtnl_getlink+0x620/0x620
[  299.087511]  rtnetlink_rcv_msg+0x453/0xb80
[  299.091734]  ? rtnl_calcit.isra.0+0x430/0x430
[  299.096229]  ? memcpy+0x35/0x50
[  299.099544]  ? netdev_pick_tx+0x2f0/0x2f0
[  299.103686]  ? __copy_skb_header+0x414/0x500
[  299.108089]  ? kfree_skbmem+0x140/0x140
[  299.112051]  netlink_rcv_skb+0x160/0x440
[  299.116146]  ? rtnl_calcit.isra.0+0x430/0x430
[  299.120661]  ? netlink_ack+0xae0/0xae0
[  299.124557]  netlink_unicast+0x4d5/0x690
[  299.128609]  ? netlink_sendskb+0x110/0x110
[  299.132828]  ? _copy_from_iter_full+0x229/0x7c0
[  299.137482]  ? __phys_addr_symbol+0x2c/0x70
[  299.141783]  ? __check_object_size+0x17b/0x3e0
[  299.146360]  netlink_sendmsg+0x6bb/0xc40
[  299.150418]  ? aa_af_perm+0x230/0x230
[  299.154216]  ? nlmsg_notify+0x1a0/0x1a0
[  299.158190]  ? kernel_recvmsg+0x220/0x220
[  299.162327]  ? nlmsg_notify+0x1a0/0x1a0
[  299.166301]  sock_sendmsg+0xc3/0x120
[  299.170008]  ___sys_sendmsg+0x7bb/0x8e0
[  299.173981]  ? check_preemption_disabled+0x41/0x280
[  299.178999]  ? copy_msghdr_from_user+0x440/0x440
[  299.183760]  ? __fget+0x32f/0x510
[  299.187210]  ? lock_downgrade+0x720/0x720
[  299.191343]  ? check_preemption_disabled+0x41/0x280
[  299.196347]  ? check_preemption_disabled+0x41/0x280
[  299.201523]  ? __fget+0x356/0x510
[  299.204974]  ? do_dup2+0x450/0x450
[  299.208513]  ? lock_downgrade+0x720/0x720
[  299.212646]  ? vfs_write+0x3d7/0x540
[  299.216349]  ? __fdget+0x1d0/0x230
[  299.219942]  __x64_sys_sendmsg+0x132/0x220
[  299.224176]  ? __sys_sendmsg+0x1b0/0x1b0
[  299.228287]  ? vfs_write+0x393/0x540
[  299.231992]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  299.237355]  ? trace_hardirqs_off_caller+0x6e/0x210
[  299.242362]  ? do_syscall_64+0x21/0x620
[  299.246335]  do_syscall_64+0xf9/0x620
[  299.250133]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  299.255303] RIP: 0033:0x4665e9
[  299.258481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  299.277363] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
15:06:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:19 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x20000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  299.285063] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  299.292351] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  299.299636] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  299.306889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  299.314147] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  299.377804] overlayfs: missing 'workdir'
[  299.398201] IPv6: ADDRCONF(NETDEV_UP): veth115: link is not ready
[  299.409891] overlayfs: missing 'workdir'
15:06:19 executing program 2 (fault-call:6 fault-nth:11):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:19 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xfffffff0}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:19 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x96000}, 0x0, 0x60000fe})

15:06:19 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x40000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:19 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff0700, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  299.551881] overlayfs: missing 'workdir'
[  299.575521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:19 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x97000}, 0x0, 0x60000fe})

15:06:19 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xfffffff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  299.619293] overlayfs: missing 'workdir'
15:06:19 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:19 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7ff00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  299.723893] FAULT_INJECTION: forcing a failure.
[  299.723893] name failslab, interval 1, probability 0, space 0, times 0
[  299.760693] CPU: 1 PID: 16124 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  299.768606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  299.777967] Call Trace:
[  299.780571]  dump_stack+0x1fc/0x2ef
[  299.782996] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  299.784208]  should_fail.cold+0xa/0xf
[  299.784229]  ? setup_fault_attr+0x200/0x200
[  299.784245]  ? lock_acquire+0x170/0x3c0
[  299.784265]  __should_failslab+0x115/0x180
[  299.784284]  should_failslab+0x5/0x10
[  299.814387]  kmem_cache_alloc_node+0x245/0x3b0
[  299.818985]  __alloc_skb+0x71/0x560
[  299.822625]  rtmsg_ifinfo_build_skb+0x72/0x1a0
[  299.827217]  rtmsg_ifinfo_newnet+0x9a/0x130
[  299.831549]  dev_change_net_namespace+0x638/0xe00
[  299.835887] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  299.836405]  ? apparmor_sb_mount+0x970/0x970
[  299.836427]  ? alloc_netdev_mqs+0xd50/0xd50
[  299.836450]  ? ns_capable+0xde/0x100
[  299.836466]  ? netlink_ns_capable+0xfd/0x130
[  299.860181]  do_setlink+0x192/0x3540
[  299.863941]  ? rtnl_fdb_add+0xa10/0xa10
[  299.867952]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  299.873153]  ? validate_nla+0x270/0x820
[  299.877135]  ? nla_parse+0x1b2/0x290
[  299.880856]  rtnl_newlink+0xda9/0x15c0
[  299.884760]  ? rtnl_getlink+0x620/0x620
[  299.888750]  ? __lock_acquire+0x6de/0x3ff0
[  299.892994]  ? __save_stack_trace+0x72/0x190
[  299.897408]  ? deref_stack_reg+0x134/0x1d0
[  299.901654]  ? mark_held_locks+0xf0/0xf0
[  299.905726]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  299.911619]  ? mark_held_locks+0xf0/0xf0
[  299.915696]  ? __lock_acquire+0x6de/0x3ff0
[  299.919944]  ? __update_load_avg_se+0x5ec/0xa00
[  299.924624]  ? mark_held_locks+0xf0/0xf0
[  299.928705]  ? __lock_acquire+0x6de/0x3ff0
[  299.932954]  ? mark_held_locks+0xf0/0xf0
[  299.937013]  ? _raw_spin_unlock_irq+0x24/0x80
[  299.937292] overlayfs: missing 'workdir'
[  299.941508]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  299.941525]  ? _raw_spin_unlock_irq+0x5a/0x80
[  299.941540]  ? finish_task_switch+0x146/0x760
[  299.941554]  ? finish_task_switch+0x118/0x760
[  299.941596]  ? mutex_trylock+0x1a0/0x1a0
[  299.948897] overlayfs: missing 'workdir'
[  299.950282]  ? check_preemption_disabled+0x41/0x280
[  299.950301]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  299.950325]  ? rtnl_getlink+0x620/0x620
[  299.950342]  rtnetlink_rcv_msg+0x453/0xb80
[  299.989832]  ? rtnl_calcit.isra.0+0x430/0x430
[  299.994338]  ? memcpy+0x35/0x50
[  299.997641]  ? netdev_pick_tx+0x2f0/0x2f0
[  300.001801]  ? __copy_skb_header+0x414/0x500
[  300.006220]  ? kfree_skbmem+0x140/0x140
[  300.010208]  netlink_rcv_skb+0x160/0x440
[  300.014280]  ? rtnl_calcit.isra.0+0x430/0x430
[  300.018782]  ? netlink_ack+0xae0/0xae0
15:06:19 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  300.022690]  netlink_unicast+0x4d5/0x690
[  300.026758]  ? netlink_sendskb+0x110/0x110
[  300.030997]  ? _copy_from_iter_full+0x229/0x7c0
[  300.035711]  ? __phys_addr_symbol+0x2c/0x70
[  300.040020]  ? __check_object_size+0x17b/0x3e0
[  300.044643]  netlink_sendmsg+0x6bb/0xc40
[  300.048700]  ? aa_af_perm+0x230/0x230
[  300.052483]  ? nlmsg_notify+0x1a0/0x1a0
[  300.056439]  ? kernel_recvmsg+0x220/0x220
[  300.060571]  ? nlmsg_notify+0x1a0/0x1a0
[  300.064963]  sock_sendmsg+0xc3/0x120
[  300.068661]  ___sys_sendmsg+0x7bb/0x8e0
[  300.072620]  ? check_preemption_disabled+0x41/0x280
[  300.077620]  ? copy_msghdr_from_user+0x440/0x440
[  300.082365]  ? __fget+0x32f/0x510
[  300.085857]  ? lock_downgrade+0x720/0x720
[  300.089987]  ? check_preemption_disabled+0x41/0x280
[  300.094992]  ? check_preemption_disabled+0x41/0x280
[  300.100001]  ? __fget+0x356/0x510
[  300.103621]  ? do_dup2+0x450/0x450
[  300.107160]  ? lock_downgrade+0x720/0x720
[  300.111297]  ? vfs_write+0x3d7/0x540
[  300.114998]  ? __fdget+0x1d0/0x230
[  300.118538]  __x64_sys_sendmsg+0x132/0x220
[  300.122762]  ? __sys_sendmsg+0x1b0/0x1b0
[  300.126832]  ? vfs_write+0x393/0x540
[  300.130553]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  300.135902]  ? trace_hardirqs_off_caller+0x6e/0x210
[  300.140917]  ? do_syscall_64+0x21/0x620
[  300.144876]  do_syscall_64+0xf9/0x620
[  300.148678]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  300.153851] RIP: 0033:0x4665e9
[  300.157025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  300.176346] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  300.184040] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  300.191291] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  300.198542] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  300.205792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  300.213046] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  300.253335] IPv6: ADDRCONF(NETDEV_UP): veth116: link is not ready
15:06:20 executing program 2 (fault-call:6 fault-nth:12):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:20 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x100000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:20 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:20 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x98000}, 0x0, 0x60000fe})

[  300.348528] syz-executor.2 (16124) used greatest stack depth: 23416 bytes left
[  300.415797] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  300.419805] overlayfs: missing 'workdir'
[  300.436020] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:20 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  300.502125] overlayfs: missing 'workdir'
15:06:20 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1fffff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  300.525552] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1f000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  300.625251] FAULT_INJECTION: forcing a failure.
[  300.625251] name failslab, interval 1, probability 0, space 0, times 0
[  300.666744] CPU: 0 PID: 16193 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  300.674652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  300.684009] Call Trace:
[  300.686607]  dump_stack+0x1fc/0x2ef
[  300.690245]  should_fail.cold+0xa/0xf
[  300.694057]  ? setup_fault_attr+0x200/0x200
[  300.698387]  ? lock_acquire+0x170/0x3c0
[  300.702372]  __should_failslab+0x115/0x180
[  300.706613]  should_failslab+0x5/0x10
[  300.710419]  kmem_cache_alloc_node_trace+0x244/0x3b0
15:06:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  300.715534]  __kmalloc_node_track_caller+0x38/0x70
[  300.720472]  __alloc_skb+0xae/0x560
[  300.724111]  rtmsg_ifinfo_build_skb+0x72/0x1a0
[  300.728704]  rtmsg_ifinfo_newnet+0x9a/0x130
[  300.733036]  dev_change_net_namespace+0x638/0xe00
[  300.737884]  ? apparmor_sb_mount+0x970/0x970
[  300.742298]  ? alloc_netdev_mqs+0xd50/0xd50
[  300.746634]  ? ns_capable+0xde/0x100
[  300.750354]  ? netlink_ns_capable+0xfd/0x130
[  300.754774]  do_setlink+0x192/0x3540
[  300.758505]  ? rtnl_fdb_add+0xa10/0xa10
[  300.760773] overlayfs: missing 'workdir'
[  300.762510]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  300.762529]  ? validate_nla+0x270/0x820
[  300.772846] overlayfs: missing 'workdir'
[  300.775714]  ? nla_parse+0x1b2/0x290
[  300.775733]  rtnl_newlink+0xda9/0x15c0
[  300.775758]  ? rtnl_getlink+0x620/0x620
[  300.775784]  ? __lock_acquire+0x6de/0x3ff0
[  300.775803]  ? __save_stack_trace+0x72/0x190
[  300.775816]  ? deref_stack_reg+0x134/0x1d0
[  300.775830]  ? mark_held_locks+0xf0/0xf0
[  300.775844]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
15:06:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x20000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  300.775860]  ? mark_held_locks+0xf0/0xf0
[  300.818220]  ? __lock_acquire+0x6de/0x3ff0
[  300.822471]  ? __update_load_avg_se+0x5ec/0xa00
[  300.827157]  ? mark_held_locks+0xf0/0xf0
[  300.831235]  ? __lock_acquire+0x6de/0x3ff0
[  300.835494]  ? mark_held_locks+0xf0/0xf0
[  300.839562]  ? _raw_spin_unlock_irq+0x24/0x80
[  300.844064]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  300.848653]  ? finish_task_switch+0x1db/0x760
[  300.853189]  ? mutex_trylock+0x1a0/0x1a0
[  300.857259]  ? check_preemption_disabled+0x41/0x280
[  300.862283]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  300.866708]  ? rtnl_getlink+0x620/0x620
[  300.868074] overlayfs: missing 'workdir'
[  300.870682]  rtnetlink_rcv_msg+0x453/0xb80
[  300.870702]  ? rtnl_calcit.isra.0+0x430/0x430
[  300.870723]  ? lock_downgrade+0x720/0x720
[  300.879455] overlayfs: missing 'workdir'
[  300.883474]  ? rcu_read_unlock_special+0x4ce/0xfc0
[  300.883498]  ? _raw_spin_unlock_irqrestore+0x79/0xe0
[  300.883517]  netlink_rcv_skb+0x160/0x440
[  300.883533]  ? rtnl_calcit.isra.0+0x430/0x430
[  300.883547]  ? netlink_ack+0xae0/0xae0
15:06:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2a030000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  300.883574]  netlink_unicast+0x4d5/0x690
[  300.883591]  ? netlink_sendskb+0x110/0x110
[  300.883607]  ? _copy_from_iter_full+0x229/0x7c0
[  300.927090]  ? __phys_addr_symbol+0x2c/0x70
[  300.931424]  ? __check_object_size+0x17b/0x3e0
[  300.936063]  netlink_sendmsg+0x6bb/0xc40
[  300.940150]  ? aa_af_perm+0x230/0x230
[  300.943958]  ? nlmsg_notify+0x1a0/0x1a0
[  300.947941]  ? kernel_recvmsg+0x220/0x220
[  300.952105]  ? nlmsg_notify+0x1a0/0x1a0
[  300.956088]  sock_sendmsg+0xc3/0x120
[  300.959814]  ___sys_sendmsg+0x7bb/0x8e0
15:06:20 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x30020000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  300.964073]  ? check_preemption_disabled+0x41/0x280
[  300.969096]  ? copy_msghdr_from_user+0x440/0x440
[  300.973874]  ? __fget+0x32f/0x510
[  300.977333]  ? lock_downgrade+0x720/0x720
[  300.981483]  ? check_preemption_disabled+0x41/0x280
[  300.986504]  ? check_preemption_disabled+0x41/0x280
[  300.991527]  ? __fget+0x356/0x510
[  300.995003]  ? do_dup2+0x450/0x450
[  300.998550]  ? lock_downgrade+0x720/0x720
[  301.002702]  ? vfs_write+0x3d7/0x540
[  301.006438]  ? __fdget+0x1d0/0x230
[  301.009987]  __x64_sys_sendmsg+0x132/0x220
[  301.014226]  ? __sys_sendmsg+0x1b0/0x1b0
[  301.018289]  ? vfs_write+0x393/0x540
[  301.022034]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  301.027402]  ? trace_hardirqs_off_caller+0x6e/0x210
[  301.032424]  ? do_syscall_64+0x21/0x620
[  301.036402]  do_syscall_64+0xf9/0x620
[  301.040239]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  301.045428] RIP: 0033:0x4665e9
[  301.048622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  301.067526] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.075243] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  301.082515] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  301.089904] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  301.097168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  301.104432] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  301.143479] IPv6: ADDRCONF(NETDEV_UP): veth117: link is not ready
15:06:21 executing program 2 (fault-call:6 fault-nth:13):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:21 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3a000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:21 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x200000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:21 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:21 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x99000}, 0x0, 0x60000fe})

[  301.240768] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  301.259670] overlayfs: missing 'workdir'
15:06:21 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:21 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9a000}, 0x0, 0x60000fe})

[  301.306479] overlayfs: missing 'workdir'
[  301.307135] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  301.324894] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  301.334156] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:21 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3a020000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  301.405981] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:21 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  301.449719] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  301.483769] FAULT_INJECTION: forcing a failure.
[  301.483769] name failslab, interval 1, probability 0, space 0, times 0
[  301.521614] CPU: 0 PID: 16265 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  301.529516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  301.536793] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  301.538895] Call Trace:
[  301.538919]  dump_stack+0x1fc/0x2ef
[  301.538939]  should_fail.cold+0xa/0xf
[  301.538966]  ? setup_fault_attr+0x200/0x200
[  301.563300]  ? lock_acquire+0x170/0x3c0
[  301.567291]  ? dev_uevent_filter+0xd0/0xd0
[  301.570946] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  301.571531]  __should_failslab+0x115/0x180
[  301.582491]  should_failslab+0x5/0x10
[  301.586470]  kmem_cache_alloc_trace+0x284/0x380
[  301.591148]  ? dev_uevent_filter+0xd0/0xd0
[  301.595388]  kobject_uevent_env+0x236/0x1480
[  301.599803]  ? __local_bh_enable_ip+0x159/0x270
[  301.604480]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  301.609069]  dev_change_net_namespace+0x65c/0xe00
[  301.613915]  ? apparmor_sb_mount+0x970/0x970
15:06:21 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  301.618330]  ? alloc_netdev_mqs+0xd50/0xd50
[  301.622656]  ? ns_capable+0xde/0x100
[  301.626386]  ? netlink_ns_capable+0xfd/0x130
[  301.630808]  do_setlink+0x192/0x3540
[  301.634538]  ? rtnl_fdb_add+0xa10/0xa10
[  301.638545]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  301.643742]  ? validate_nla+0x270/0x820
[  301.647725]  ? nla_parse+0x1b2/0x290
[  301.651450]  rtnl_newlink+0xda9/0x15c0
[  301.655348]  ? rtnl_getlink+0x620/0x620
[  301.659332]  ? __lock_acquire+0x6de/0x3ff0
[  301.663572]  ? __save_stack_trace+0x72/0x190
[  301.667988]  ? deref_stack_reg+0x134/0x1d0
[  301.672229]  ? mark_held_locks+0xf0/0xf0
[  301.676299]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  301.682194]  ? mark_held_locks+0xf0/0xf0
[  301.686268]  ? __lock_acquire+0x6de/0x3ff0
[  301.690516]  ? __update_load_avg_se+0x5ec/0xa00
[  301.695195]  ? mark_held_locks+0xf0/0xf0
[  301.699275]  ? __lock_acquire+0x6de/0x3ff0
[  301.703528]  ? mark_held_locks+0xf0/0xf0
[  301.707592]  ? _raw_spin_unlock_irq+0x24/0x80
[  301.712094]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  301.716686]  ? _raw_spin_unlock_irq+0x5a/0x80
15:06:21 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3f000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  301.721188]  ? finish_task_switch+0x146/0x760
[  301.725684]  ? finish_task_switch+0x118/0x760
[  301.730218]  ? mutex_trylock+0x1a0/0x1a0
[  301.734285]  ? check_preemption_disabled+0x41/0x280
[  301.739306]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  301.743729]  ? rtnl_getlink+0x620/0x620
[  301.747715]  rtnetlink_rcv_msg+0x453/0xb80
[  301.751964]  ? rtnl_calcit.isra.0+0x430/0x430
[  301.756466]  ? memcpy+0x35/0x50
[  301.759750]  ? netdev_pick_tx+0x2f0/0x2f0
[  301.763902]  ? __copy_skb_header+0x414/0x500
[  301.768314]  ? kfree_skbmem+0x140/0x140
[  301.772295]  netlink_rcv_skb+0x160/0x440
[  301.776362]  ? rtnl_calcit.isra.0+0x430/0x430
[  301.780864]  ? netlink_ack+0xae0/0xae0
[  301.784769]  netlink_unicast+0x4d5/0x690
[  301.788836]  ? netlink_sendskb+0x110/0x110
[  301.793075]  ? _copy_from_iter_full+0x229/0x7c0
[  301.797749]  ? __phys_addr_symbol+0x2c/0x70
[  301.802080]  ? __check_object_size+0x17b/0x3e0
[  301.806673]  netlink_sendmsg+0x6bb/0xc40
[  301.810741]  ? aa_af_perm+0x230/0x230
[  301.810869] overlayfs: missing 'workdir'
[  301.814542]  ? nlmsg_notify+0x1a0/0x1a0
15:06:21 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4a000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  301.814560]  ? kernel_recvmsg+0x220/0x220
[  301.814579]  ? nlmsg_notify+0x1a0/0x1a0
[  301.814594]  sock_sendmsg+0xc3/0x120
[  301.814611]  ___sys_sendmsg+0x7bb/0x8e0
[  301.814629]  ? check_preemption_disabled+0x41/0x280
[  301.814644]  ? copy_msghdr_from_user+0x440/0x440
[  301.814659]  ? __fget+0x32f/0x510
[  301.814678]  ? lock_downgrade+0x720/0x720
[  301.814696]  ? check_preemption_disabled+0x41/0x280
[  301.833035] overlayfs: missing 'workdir'
[  301.834490]  ? check_preemption_disabled+0x41/0x280
[  301.834511]  ? __fget+0x356/0x510
[  301.834529]  ? do_dup2+0x450/0x450
[  301.834543]  ? lock_downgrade+0x720/0x720
[  301.834559]  ? vfs_write+0x3d7/0x540
[  301.834576]  ? __fdget+0x1d0/0x230
[  301.834594]  __x64_sys_sendmsg+0x132/0x220
[  301.834612]  ? __sys_sendmsg+0x1b0/0x1b0
[  301.896515]  ? vfs_write+0x393/0x540
[  301.900250]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  301.905621]  ? trace_hardirqs_off_caller+0x6e/0x210
[  301.908484] overlayfs: missing 'workdir'
[  301.910667]  ? do_syscall_64+0x21/0x620
[  301.910686]  do_syscall_64+0xf9/0x620
[  301.910712]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  301.926485] overlayfs: missing 'workdir'
[  301.927664] RIP: 0033:0x4665e9
[  301.927679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  301.927687] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  301.927704] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  301.968780] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  301.976056] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  301.983333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  301.990605] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  302.022196] IPv6: ADDRCONF(NETDEV_UP): veth118: link is not ready
[  302.060017] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:22 executing program 2 (fault-call:6 fault-nth:14):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x58030000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:22 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf0ffff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:22 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:22 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9b000}, 0x0, 0x60000fe})

[  302.080042] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:22 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:22 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9c000}, 0x0, 0x60000fe})

[  302.206671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:22 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5e010000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:22 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff0700, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  302.333871] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  302.384158] FAULT_INJECTION: forcing a failure.
[  302.384158] name failslab, interval 1, probability 0, space 0, times 0
[  302.389155] overlayfs: missing 'workdir'
[  302.407273] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  302.423630] CPU: 0 PID: 16340 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  302.431534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  302.440889] Call Trace:
[  302.442692] overlayfs: missing 'workdir'
[  302.443485]  dump_stack+0x1fc/0x2ef
[  302.443506]  should_fail.cold+0xa/0xf
[  302.443525]  ? setup_fault_attr+0x200/0x200
[  302.443540]  ? lock_acquire+0x170/0x3c0
[  302.443560]  __should_failslab+0x115/0x180
[  302.443575]  should_failslab+0x5/0x10
[  302.443590]  __kmalloc+0x2ab/0x3c0
[  302.474839]  ? kobject_get_path+0xbf/0x240
[  302.479088]  kobject_get_path+0xbf/0x240
[  302.483163]  kobject_uevent_env+0x25c/0x1480
[  302.487582]  ? __local_bh_enable_ip+0x159/0x270
[  302.492257]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  302.496847]  dev_change_net_namespace+0x65c/0xe00
[  302.501702]  ? apparmor_sb_mount+0x970/0x970
[  302.506120]  ? alloc_netdev_mqs+0xd50/0xd50
[  302.510457]  ? ns_capable+0xde/0x100
[  302.514179]  ? netlink_ns_capable+0xfd/0x130
[  302.518595]  do_setlink+0x192/0x3540
[  302.522325]  ? rtnl_fdb_add+0xa10/0xa10
[  302.526336]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  302.531533]  ? validate_nla+0x270/0x820
[  302.535517]  ? nla_parse+0x1b2/0x290
[  302.539247]  rtnl_newlink+0xda9/0x15c0
[  302.543149]  ? rtnl_getlink+0x620/0x620
[  302.547137]  ? __lock_acquire+0x6de/0x3ff0
[  302.551376]  ? __save_stack_trace+0x72/0x190
[  302.555787]  ? deref_stack_reg+0x134/0x1d0
[  302.560027]  ? mark_held_locks+0xf0/0xf0
[  302.564100]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  302.569991]  ? mark_held_locks+0xf0/0xf0
[  302.574066]  ? __lock_acquire+0x6de/0x3ff0
[  302.578322]  ? __update_load_avg_se+0x5ec/0xa00
15:06:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x60000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  302.582999]  ? mark_held_locks+0xf0/0xf0
[  302.587076]  ? __lock_acquire+0x6de/0x3ff0
[  302.591330]  ? mark_held_locks+0xf0/0xf0
[  302.595394]  ? _raw_spin_unlock_irq+0x24/0x80
[  302.599898]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  302.604486]  ? _raw_spin_unlock_irq+0x5a/0x80
[  302.609084]  ? finish_task_switch+0x146/0x760
[  302.613582]  ? finish_task_switch+0x118/0x760
[  302.618116]  ? mutex_trylock+0x1a0/0x1a0
[  302.622180]  ? check_preemption_disabled+0x41/0x280
[  302.627200]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  302.631624]  ? rtnl_getlink+0x620/0x620
[  302.635604]  rtnetlink_rcv_msg+0x453/0xb80
[  302.639853]  ? rtnl_calcit.isra.0+0x430/0x430
[  302.644353]  ? memcpy+0x35/0x50
[  302.646116] overlayfs: missing 'workdir'
[  302.647637]  ? netdev_pick_tx+0x2f0/0x2f0
[  302.647654]  ? __copy_skb_header+0x414/0x500
[  302.647669]  ? kfree_skbmem+0x140/0x140
[  302.647687]  netlink_rcv_skb+0x160/0x440
[  302.668279]  ? rtnl_calcit.isra.0+0x430/0x430
[  302.669986] overlayfs: missing 'workdir'
[  302.672787]  ? netlink_ack+0xae0/0xae0
[  302.672816]  netlink_unicast+0x4d5/0x690
15:06:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x84030000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  302.672833]  ? netlink_sendskb+0x110/0x110
[  302.689024]  ? _copy_from_iter_full+0x229/0x7c0
[  302.693695]  ? __phys_addr_symbol+0x2c/0x70
[  302.698025]  ? __check_object_size+0x17b/0x3e0
[  302.702634]  netlink_sendmsg+0x6bb/0xc40
[  302.706720]  ? aa_af_perm+0x230/0x230
[  302.710524]  ? nlmsg_notify+0x1a0/0x1a0
[  302.714504]  ? kernel_recvmsg+0x220/0x220
[  302.718664]  ? nlmsg_notify+0x1a0/0x1a0
[  302.722652]  sock_sendmsg+0xc3/0x120
[  302.726378]  ___sys_sendmsg+0x7bb/0x8e0
[  302.730371]  ? copy_msghdr_from_user+0x440/0x440
[  302.735134]  ? __fget+0x32f/0x510
[  302.738599]  ? lock_downgrade+0x720/0x720
[  302.742752]  ? check_preemption_disabled+0x41/0x280
[  302.747775]  ? check_preemption_disabled+0x41/0x280
[  302.752799]  ? __fget+0x356/0x510
[  302.756266]  ? do_dup2+0x450/0x450
[  302.759816]  ? _raw_spin_unlock_irq+0x24/0x80
[  302.764323]  ? __fdget+0x1d0/0x230
[  302.767873]  __x64_sys_sendmsg+0x132/0x220
[  302.772109]  ? __sys_sendmsg+0x1b0/0x1b0
[  302.776184]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  302.781553]  ? trace_hardirqs_off_caller+0x6e/0x210
[  302.786576]  ? do_syscall_64+0x21/0x620
[  302.790556]  do_syscall_64+0xf9/0x620
[  302.794366]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  302.799560] RIP: 0033:0x4665e9
[  302.802757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  302.821653] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  302.829410] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  302.836669] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  302.843939] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  302.851206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  302.858468] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  302.891091] IPv6: ADDRCONF(NETDEV_UP): veth119: link is not ready
15:06:22 executing program 2 (fault-call:6 fault-nth:15):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8cffffff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:22 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:22 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:22 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9d000}, 0x0, 0x60000fe})

15:06:22 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  303.011689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  303.036799] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8e000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  303.081315] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  303.095335] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:23 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9e000}, 0x0, 0x60000fe})

[  303.144091] FAULT_INJECTION: forcing a failure.
[  303.144091] name failslab, interval 1, probability 0, space 0, times 0
[  303.157198] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  303.183830] CPU: 0 PID: 16415 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  303.191741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  303.201092] Call Trace:
[  303.203689]  dump_stack+0x1fc/0x2ef
[  303.207330]  should_fail.cold+0xa/0xf
[  303.211142]  ? setup_fault_attr+0x200/0x200
[  303.215467]  ? lock_acquire+0x170/0x3c0
[  303.219465]  __should_failslab+0x115/0x180
[  303.223709]  should_failslab+0x5/0x10
[  303.227519]  kmem_cache_alloc_node+0x245/0x3b0
[  303.232113]  __alloc_skb+0x71/0x560
[  303.235752]  alloc_uevent_skb+0x7b/0x210
[  303.239819]  kobject_uevent_env+0x10f1/0x1480
[  303.244326]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  303.248919]  dev_change_net_namespace+0x65c/0xe00
[  303.253774]  ? apparmor_sb_mount+0x970/0x970
[  303.258190]  ? alloc_netdev_mqs+0xd50/0xd50
[  303.262526]  ? ns_capable+0xde/0x100
[  303.266504]  ? netlink_ns_capable+0xfd/0x130
[  303.270910]  do_setlink+0x192/0x3540
[  303.274613]  ? rtnl_fdb_add+0xa10/0xa10
[  303.278584]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  303.283770]  ? validate_nla+0x270/0x820
[  303.287737]  ? nla_parse+0x1b2/0x290
[  303.291455]  rtnl_newlink+0xda9/0x15c0
[  303.295357]  ? rtnl_getlink+0x620/0x620
[  303.299327]  ? __lock_acquire+0x6de/0x3ff0
[  303.303562]  ? __save_stack_trace+0x72/0x190
[  303.307960]  ? deref_stack_reg+0x134/0x1d0
[  303.312222]  ? mark_held_locks+0xf0/0xf0
[  303.316271]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  303.322141]  ? mark_held_locks+0xf0/0xf0
[  303.326188]  ? __lock_acquire+0x6de/0x3ff0
[  303.330408]  ? mark_held_locks+0xf0/0xf0
[  303.334478]  ? __lock_acquire+0x6de/0x3ff0
[  303.338714]  ? mark_held_locks+0xf0/0xf0
[  303.342757]  ? _raw_spin_unlock_irq+0x24/0x80
[  303.347237]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  303.351799]  ? _raw_spin_unlock_irq+0x5a/0x80
[  303.356275]  ? finish_task_switch+0x146/0x760
[  303.360747]  ? finish_task_switch+0x118/0x760
[  303.365240]  ? mutex_trylock+0x1a0/0x1a0
[  303.369286]  ? check_preemption_disabled+0x41/0x280
[  303.374284]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  303.378679]  ? rtnl_getlink+0x620/0x620
[  303.382640]  rtnetlink_rcv_msg+0x453/0xb80
[  303.386861]  ? rtnl_calcit.isra.0+0x430/0x430
[  303.391337]  ? memcpy+0x35/0x50
[  303.394644]  ? netdev_pick_tx+0x2f0/0x2f0
[  303.398784]  ? __copy_skb_header+0x414/0x500
[  303.403175]  ? kfree_skbmem+0x140/0x140
[  303.407170]  netlink_rcv_skb+0x160/0x440
[  303.411218]  ? rtnl_calcit.isra.0+0x430/0x430
[  303.415711]  ? netlink_ack+0xae0/0xae0
[  303.419601]  netlink_unicast+0x4d5/0x690
[  303.423660]  ? netlink_sendskb+0x110/0x110
[  303.427895]  ? _copy_from_iter_full+0x229/0x7c0
[  303.432574]  ? __phys_addr_symbol+0x2c/0x70
[  303.436878]  ? __check_object_size+0x17b/0x3e0
[  303.441453]  netlink_sendmsg+0x6bb/0xc40
[  303.445519]  ? aa_af_perm+0x230/0x230
[  303.449300]  ? nlmsg_notify+0x1a0/0x1a0
[  303.453258]  ? kernel_recvmsg+0x220/0x220
[  303.457402]  ? nlmsg_notify+0x1a0/0x1a0
[  303.461373]  sock_sendmsg+0xc3/0x120
[  303.465100]  ___sys_sendmsg+0x7bb/0x8e0
[  303.469066]  ? check_preemption_disabled+0x41/0x280
[  303.474075]  ? copy_msghdr_from_user+0x440/0x440
[  303.478831]  ? __fget+0x32f/0x510
[  303.482285]  ? lock_downgrade+0x720/0x720
[  303.486419]  ? check_preemption_disabled+0x41/0x280
[  303.491421]  ? check_preemption_disabled+0x41/0x280
[  303.496435]  ? __fget+0x356/0x510
[  303.499885]  ? do_dup2+0x450/0x450
[  303.503424]  ? lock_downgrade+0x720/0x720
[  303.507563]  ? vfs_write+0x3d7/0x540
[  303.511276]  ? __fdget+0x1d0/0x230
[  303.514802]  __x64_sys_sendmsg+0x132/0x220
[  303.519020]  ? __sys_sendmsg+0x1b0/0x1b0
[  303.523063]  ? vfs_write+0x393/0x540
[  303.526766]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  303.532115]  ? trace_hardirqs_off_caller+0x6e/0x210
[  303.537118]  ? do_syscall_64+0x21/0x620
[  303.541080]  do_syscall_64+0xf9/0x620
[  303.544877]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  303.550061] RIP: 0033:0x4665e9
[  303.553286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  303.572177] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  303.579869] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  303.587130] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
15:06:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9c010000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  303.594391] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  303.601657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  303.608910] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
15:06:23 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  303.641282] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:23 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x2000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb3010000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  303.688595] IPv6: ADDRCONF(NETDEV_UP): veth120: link is not ready
[  303.759978] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:23 executing program 2 (fault-call:6 fault-nth:16):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:23 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x9f000}, 0x0, 0x60000fe})

15:06:23 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  303.802232] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  303.822010] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc0ed0000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  303.866351] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  303.904596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:23 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8040000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:23 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa0000}, 0x0, 0x60000fe})

[  303.950466] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  303.970600] overlayfs: missing 'workdir'
15:06:23 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x19}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  304.018123] overlayfs: missing 'workdir'
15:06:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd0000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  304.093608] FAULT_INJECTION: forcing a failure.
[  304.093608] name failslab, interval 1, probability 0, space 0, times 0
[  304.138746] CPU: 0 PID: 16475 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  304.146657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  304.156015] Call Trace:
[  304.158613]  dump_stack+0x1fc/0x2ef
[  304.162258]  should_fail.cold+0xa/0xf
[  304.166071]  ? setup_fault_attr+0x200/0x200
[  304.170402]  ? lock_acquire+0x170/0x3c0
[  304.174389]  __should_failslab+0x115/0x180
[  304.178635]  should_failslab+0x5/0x10
[  304.182439]  kmem_cache_alloc_node+0x245/0x3b0
[  304.187035]  __alloc_skb+0x71/0x560
[  304.190679]  alloc_uevent_skb+0x7b/0x210
[  304.194756]  kobject_uevent_env+0x10f1/0x1480
[  304.199272]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  304.203868]  dev_change_net_namespace+0x65c/0xe00
[  304.208720]  ? apparmor_sb_mount+0x970/0x970
[  304.213139]  ? alloc_netdev_mqs+0xd50/0xd50
[  304.217475]  ? ns_capable+0xde/0x100
[  304.221201]  ? netlink_ns_capable+0xfd/0x130
[  304.225619]  do_setlink+0x192/0x3540
[  304.229350]  ? rtnl_fdb_add+0xa10/0xa10
[  304.233354]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  304.238552]  ? validate_nla+0x270/0x820
[  304.242554]  ? nla_parse+0x1b2/0x290
[  304.246264]  rtnl_newlink+0xda9/0x15c0
[  304.250140]  ? rtnl_getlink+0x620/0x620
[  304.254120]  ? __lock_acquire+0x6de/0x3ff0
[  304.258351]  ? __save_stack_trace+0x72/0x190
[  304.263090]  ? deref_stack_reg+0x134/0x1d0
[  304.267310]  ? mark_held_locks+0xf0/0xf0
[  304.271424]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  304.277307]  ? mark_held_locks+0xf0/0xf0
[  304.281364]  ? __lock_acquire+0x6de/0x3ff0
[  304.285586]  ? __update_load_avg_se+0x5ec/0xa00
[  304.290239]  ? mark_held_locks+0xf0/0xf0
[  304.294303]  ? __lock_acquire+0x6de/0x3ff0
[  304.298553]  ? mark_held_locks+0xf0/0xf0
[  304.302610]  ? _raw_spin_unlock_irq+0x24/0x80
[  304.307223]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  304.311808]  ? finish_task_switch+0x1db/0x760
[  304.316334]  ? mutex_trylock+0x1a0/0x1a0
[  304.320392]  ? check_preemption_disabled+0x41/0x280
[  304.325401]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  304.329850]  ? rtnl_getlink+0x620/0x620
[  304.333822]  rtnetlink_rcv_msg+0x453/0xb80
[  304.338063]  ? rtnl_calcit.isra.0+0x430/0x430
[  304.342558]  ? memcpy+0x35/0x50
[  304.345842]  ? netdev_pick_tx+0x2f0/0x2f0
[  304.349984]  ? __copy_skb_header+0x414/0x500
[  304.354386]  ? kfree_skbmem+0x140/0x140
[  304.358394]  netlink_rcv_skb+0x160/0x440
[  304.362439]  ? rtnl_calcit.isra.0+0x430/0x430
[  304.366924]  ? netlink_ack+0xae0/0xae0
[  304.370803]  netlink_unicast+0x4d5/0x690
[  304.374871]  ? netlink_sendskb+0x110/0x110
[  304.379110]  ? _copy_from_iter_full+0x229/0x7c0
[  304.383786]  ? __phys_addr_symbol+0x2c/0x70
[  304.388116]  ? __check_object_size+0x17b/0x3e0
[  304.392693]  netlink_sendmsg+0x6bb/0xc40
[  304.396764]  ? aa_af_perm+0x230/0x230
[  304.400574]  ? nlmsg_notify+0x1a0/0x1a0
[  304.404561]  ? kernel_recvmsg+0x220/0x220
[  304.408711]  ? nlmsg_notify+0x1a0/0x1a0
[  304.412675]  sock_sendmsg+0xc3/0x120
[  304.416389]  ___sys_sendmsg+0x7bb/0x8e0
[  304.420359]  ? check_preemption_disabled+0x41/0x280
[  304.425361]  ? copy_msghdr_from_user+0x440/0x440
[  304.430108]  ? __fget+0x32f/0x510
[  304.433570]  ? lock_downgrade+0x720/0x720
[  304.437713]  ? check_preemption_disabled+0x41/0x280
[  304.442718]  ? check_preemption_disabled+0x41/0x280
[  304.447723]  ? __fget+0x356/0x510
[  304.451161]  ? do_dup2+0x450/0x450
[  304.454825]  ? lock_downgrade+0x720/0x720
[  304.458983]  ? vfs_write+0x3d7/0x540
[  304.462694]  ? __fdget+0x1d0/0x230
[  304.466220]  __x64_sys_sendmsg+0x132/0x220
[  304.470440]  ? __sys_sendmsg+0x1b0/0x1b0
[  304.474496]  ? vfs_write+0x393/0x540
[  304.478207]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  304.483565]  ? trace_hardirqs_off_caller+0x6e/0x210
[  304.488576]  ? do_syscall_64+0x21/0x620
[  304.492532]  do_syscall_64+0xf9/0x620
[  304.496330]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  304.501508] RIP: 0033:0x4665e9
[  304.504690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  304.523693] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  304.531510] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
15:06:24 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x3000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd1020000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:24 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  304.538861] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  304.546129] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  304.553396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  304.560658] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
15:06:24 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x28}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:24 executing program 2 (fault-call:6 fault-nth:17):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

[  304.632968] IPv6: ADDRCONF(NETDEV_UP): veth121: link is not ready
15:06:24 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa1000}, 0x0, 0x60000fe})

15:06:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xdc020000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  304.705026] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  304.719452] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  304.764461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  304.774408] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  304.785929] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:24 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x60}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  304.826313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:24 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf0030000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  304.904349] FAULT_INJECTION: forcing a failure.
[  304.904349] name failslab, interval 1, probability 0, space 0, times 0
[  304.946043] CPU: 1 PID: 16536 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  304.953956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  304.963311] Call Trace:
[  304.965917]  dump_stack+0x1fc/0x2ef
[  304.969561]  should_fail.cold+0xa/0xf
[  304.973377]  ? setup_fault_attr+0x200/0x200
[  304.977707]  ? lock_acquire+0x170/0x3c0
[  304.981701]  ? dev_uevent_filter+0xd0/0xd0
[  304.985947]  __should_failslab+0x115/0x180
[  304.990197]  should_failslab+0x5/0x10
[  304.994005]  kmem_cache_alloc_trace+0x284/0x380
[  304.998684]  ? dev_uevent_filter+0xd0/0xd0
[  305.002928]  kobject_uevent_env+0x236/0x1480
[  305.007354]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  305.011953]  dev_change_net_namespace+0x94c/0xe00
[  305.016808]  ? alloc_netdev_mqs+0xd50/0xd50
[  305.021147]  ? ns_capable+0xde/0x100
[  305.024869]  ? netlink_ns_capable+0xfd/0x130
[  305.029287]  do_setlink+0x192/0x3540
[  305.033020]  ? rtnl_fdb_add+0xa10/0xa10
[  305.037026]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  305.042223]  ? validate_nla+0x270/0x820
[  305.046210]  ? nla_parse+0x1b2/0x290
[  305.049928]  rtnl_newlink+0xda9/0x15c0
[  305.053832]  ? rtnl_getlink+0x620/0x620
[  305.057865]  ? __lock_acquire+0x6de/0x3ff0
[  305.062116]  ? __lock_acquire+0x6de/0x3ff0
[  305.066367]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  305.072259]  ? mark_held_locks+0xf0/0xf0
[  305.076335]  ? __lock_acquire+0x6de/0x3ff0
[  305.080581]  ? __update_load_avg_se+0x5ec/0xa00
[  305.085256]  ? mark_held_locks+0xf0/0xf0
[  305.089334]  ? __lock_acquire+0x6de/0x3ff0
[  305.093589]  ? mark_held_locks+0xf0/0xf0
[  305.097662]  ? _raw_spin_unlock_irq+0x24/0x80
[  305.102170]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  305.106763]  ? _raw_spin_unlock_irq+0x5a/0x80
[  305.111266]  ? finish_task_switch+0x146/0x760
[  305.115767]  ? finish_task_switch+0x118/0x760
[  305.120304]  ? mutex_trylock+0x1a0/0x1a0
[  305.124376]  ? check_preemption_disabled+0x41/0x280
[  305.128393] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  305.129400]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  305.129430]  ? rtnl_getlink+0x620/0x620
[  305.129448]  rtnetlink_rcv_msg+0x453/0xb80
[  305.129465]  ? rtnl_calcit.isra.0+0x430/0x430
[  305.152483] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  305.156573]  ? memcpy+0x35/0x50
[  305.156591]  ? netdev_pick_tx+0x2f0/0x2f0
[  305.156604]  ? __copy_skb_header+0x414/0x500
[  305.156620]  ? kfree_skbmem+0x140/0x140
[  305.156641]  netlink_rcv_skb+0x160/0x440
[  305.156658]  ? rtnl_calcit.isra.0+0x430/0x430
[  305.156677]  ? netlink_ack+0xae0/0xae0
[  305.191598]  netlink_unicast+0x4d5/0x690
15:06:24 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa2000}, 0x0, 0x60000fe})

15:06:24 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf3030000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:24 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xf6ffffff, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xfe030000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff030000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  305.195675]  ? netlink_sendskb+0x110/0x110
[  305.199919]  ? _copy_from_iter_full+0x229/0x7c0
[  305.204598]  ? __phys_addr_symbol+0x2c/0x70
[  305.208926]  ? __check_object_size+0x17b/0x3e0
[  305.213518]  netlink_sendmsg+0x6bb/0xc40
[  305.217588]  ? aa_af_perm+0x230/0x230
[  305.221395]  ? nlmsg_notify+0x1a0/0x1a0
[  305.225377]  ? kernel_recvmsg+0x220/0x220
[  305.229543]  ? nlmsg_notify+0x1a0/0x1a0
[  305.233529]  sock_sendmsg+0xc3/0x120
[  305.237257]  ___sys_sendmsg+0x7bb/0x8e0
[  305.241240]  ? check_preemption_disabled+0x41/0x280
[  305.246266]  ? copy_msghdr_from_user+0x440/0x440
[  305.251026]  ? __fget+0x32f/0x510
[  305.254485]  ? lock_downgrade+0x720/0x720
[  305.258648]  ? check_preemption_disabled+0x41/0x280
[  305.263677]  ? check_preemption_disabled+0x41/0x280
[  305.268715]  ? __fget+0x356/0x510
[  305.272177]  ? do_dup2+0x450/0x450
[  305.275733]  ? lock_downgrade+0x720/0x720
[  305.279889]  ? vfs_write+0x3d7/0x540
[  305.283657]  ? __fdget+0x1d0/0x230
[  305.287186]  __x64_sys_sendmsg+0x132/0x220
[  305.291405]  ? __sys_sendmsg+0x1b0/0x1b0
[  305.295462]  ? vfs_write+0x393/0x540
[  305.299175]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  305.304523]  ? trace_hardirqs_off_caller+0x6e/0x210
[  305.309539]  ? do_syscall_64+0x21/0x620
[  305.313499]  do_syscall_64+0xf9/0x620
[  305.317288]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  305.322539] RIP: 0033:0x4665e9
[  305.325747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  305.344636] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  305.352351] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  305.359606] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  305.366859] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  305.374137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  305.381394] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  305.410547] IPv6: ADDRCONF(NETDEV_UP): veth122: link is not ready
15:06:25 executing program 2 (fault-call:6 fault-nth:18):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:25 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa1e2144, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xff0f0000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:25 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:25 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa3000}, 0x0, 0x60000fe})

[  305.529313] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  305.601350] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  305.606360] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xffff1f00, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:25 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  305.662320] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
15:06:25 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x5000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:25 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa4000}, 0x0, 0x60000fe})

15:06:25 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xffffff7f, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  305.774816] FAULT_INJECTION: forcing a failure.
[  305.774816] name failslab, interval 1, probability 0, space 0, times 0
[  305.790586] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  305.802315] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  305.821298] CPU: 0 PID: 16606 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  305.829204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  305.838564] Call Trace:
[  305.841166]  dump_stack+0x1fc/0x2ef
[  305.844808]  should_fail.cold+0xa/0xf
[  305.848624]  ? setup_fault_attr+0x200/0x200
[  305.852952]  ? lock_acquire+0x170/0x3c0
[  305.856933]  __should_failslab+0x115/0x180
[  305.861180]  should_failslab+0x5/0x10
[  305.864995]  __kmalloc+0x2ab/0x3c0
[  305.868548]  ? kobject_get_path+0xbf/0x240
[  305.872795]  kobject_get_path+0xbf/0x240
[  305.876869]  kobject_uevent_env+0x25c/0x1480
[  305.881293]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  305.885884]  dev_change_net_namespace+0x94c/0xe00
[  305.890741]  ? alloc_netdev_mqs+0xd50/0xd50
[  305.895088]  ? ns_capable+0xde/0x100
[  305.898810]  ? netlink_ns_capable+0xfd/0x130
[  305.903230]  do_setlink+0x192/0x3540
[  305.906960]  ? rtnl_fdb_add+0xa10/0xa10
[  305.910971]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  305.916173]  ? validate_nla+0x270/0x820
[  305.920165]  ? nla_parse+0x1b2/0x290
[  305.923892]  rtnl_newlink+0xda9/0x15c0
[  305.925055] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  305.927849]  ? rtnl_getlink+0x620/0x620
[  305.927878]  ? __lock_acquire+0x6de/0x3ff0
[  305.927899]  ? __save_stack_trace+0x72/0x190
[  305.927912]  ? deref_stack_reg+0x134/0x1d0
[  305.927930]  ? mark_held_locks+0xf0/0xf0
[  305.942221] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  305.946248]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  305.946268]  ? mark_held_locks+0xf0/0xf0
[  305.946289]  ? __lock_acquire+0x6de/0x3ff0
[  305.946310]  ? __update_load_avg_se+0x5ec/0xa00
[  305.946326]  ? mark_held_locks+0xf0/0xf0
[  305.946349]  ? __lock_acquire+0x6de/0x3ff0
[  305.946374]  ? mark_held_locks+0xf0/0xf0
[  305.946392]  ? _raw_spin_unlock_irq+0x24/0x80
[  305.971514] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  305.972317]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  305.972336]  ? finish_task_switch+0x1db/0x760
15:06:25 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x6000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  305.972385]  ? mutex_trylock+0x1a0/0x1a0
[  306.029746]  ? check_preemption_disabled+0x41/0x280
[  306.034772]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  306.039206]  ? rtnl_getlink+0x620/0x620
[  306.043209]  rtnetlink_rcv_msg+0x453/0xb80
[  306.047460]  ? rtnl_calcit.isra.0+0x430/0x430
[  306.051962]  ? memcpy+0x35/0x50
[  306.055248]  ? netdev_pick_tx+0x2f0/0x2f0
[  306.059395]  ? __copy_skb_header+0x414/0x500
[  306.063817]  ? kfree_skbmem+0x140/0x140
[  306.067827]  netlink_rcv_skb+0x160/0x440
[  306.071903]  ? rtnl_calcit.isra.0+0x430/0x430
[  306.076408]  ? netlink_ack+0xae0/0xae0
[  306.080295]  netlink_unicast+0x4d5/0x690
[  306.084353]  ? netlink_sendskb+0x110/0x110
[  306.088575]  ? _copy_from_iter_full+0x229/0x7c0
[  306.093237]  ? __phys_addr_symbol+0x2c/0x70
[  306.097645]  ? __check_object_size+0x17b/0x3e0
[  306.102230]  netlink_sendmsg+0x6bb/0xc40
[  306.106288]  ? aa_af_perm+0x230/0x230
[  306.110156]  ? nlmsg_notify+0x1a0/0x1a0
[  306.114123]  ? kernel_recvmsg+0x220/0x220
[  306.118296]  ? nlmsg_notify+0x1a0/0x1a0
[  306.122282]  sock_sendmsg+0xc3/0x120
[  306.126073]  ___sys_sendmsg+0x7bb/0x8e0
[  306.130043]  ? check_preemption_disabled+0x41/0x280
[  306.135059]  ? copy_msghdr_from_user+0x440/0x440
[  306.139808]  ? __fget+0x32f/0x510
[  306.143263]  ? lock_downgrade+0x720/0x720
[  306.147403]  ? check_preemption_disabled+0x41/0x280
[  306.152408]  ? check_preemption_disabled+0x41/0x280
[  306.157521]  ? __fget+0x356/0x510
[  306.160994]  ? do_dup2+0x450/0x450
[  306.164527]  ? lock_downgrade+0x720/0x720
[  306.168665]  ? vfs_write+0x3d7/0x540
[  306.172362]  ? __fdget+0x1d0/0x230
[  306.175902]  __x64_sys_sendmsg+0x132/0x220
[  306.180134]  ? __sys_sendmsg+0x1b0/0x1b0
[  306.184179]  ? vfs_write+0x393/0x540
[  306.187883]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  306.193242]  ? trace_hardirqs_off_caller+0x6e/0x210
[  306.198257]  ? do_syscall_64+0x21/0x620
[  306.202232]  do_syscall_64+0xf9/0x620
[  306.206029]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  306.211198] RIP: 0033:0x4665e9
[  306.214382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  306.233284] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.240986] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  306.248263] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  306.255523] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  306.262787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  306.270046] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  306.322026] IPv6: ADDRCONF(NETDEV_UP): veth123: link is not ready
15:06:26 executing program 2 (fault-call:6 fault-nth:19):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:26 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xffffff8c, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:26 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa5000}, 0x0, 0x60000fe})

15:06:26 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  306.377723] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  306.395470] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:26 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa6000}, 0x0, 0x60000fe})

[  306.422042] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  306.456032] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:06:26 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:26 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x7000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  306.481906] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:26 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xfffffff6, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xd000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  306.541908] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:26 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa7000}, 0x0, 0x60000fe})

[  306.614055] FAULT_INJECTION: forcing a failure.
[  306.614055] name failslab, interval 1, probability 0, space 0, times 0
[  306.635340] CPU: 0 PID: 16663 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  306.643278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  306.652727] Call Trace:
[  306.655341]  dump_stack+0x1fc/0x2ef
[  306.658980]  should_fail.cold+0xa/0xf
[  306.662776]  ? setup_fault_attr+0x200/0x200
[  306.667131]  ? lock_acquire+0x170/0x3c0
[  306.671121]  __should_failslab+0x115/0x180
[  306.675367]  should_failslab+0x5/0x10
[  306.678533] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  306.679171]  kmem_cache_alloc_node+0x245/0x3b0
[  306.692501] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  306.693835]  __alloc_skb+0x71/0x560
[  306.693857]  alloc_uevent_skb+0x7b/0x210
[  306.693876]  kobject_uevent_env+0x10f1/0x1480
[  306.693900]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  306.693916]  dev_change_net_namespace+0x94c/0xe00
[  306.693935]  ? alloc_netdev_mqs+0xd50/0xd50
[  306.693957]  ? ns_capable+0xde/0x100
[  306.693972]  ? netlink_ns_capable+0xfd/0x130
[  306.693990]  do_setlink+0x192/0x3540
[  306.738392]  ? rtnl_fdb_add+0xa10/0xa10
[  306.739406] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  306.742482]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  306.757686]  ? validate_nla+0x270/0x820
[  306.761675]  ? nla_parse+0x1b2/0x290
[  306.765414]  rtnl_newlink+0xda9/0x15c0
[  306.769316]  ? rtnl_getlink+0x620/0x620
[  306.770249] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  306.773301]  ? __lock_acquire+0x6de/0x3ff0
[  306.773322]  ? __save_stack_trace+0x72/0x190
[  306.773337]  ? deref_stack_reg+0x134/0x1d0
[  306.773350]  ? mark_held_locks+0xf0/0xf0
[  306.773365]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  306.773380]  ? mark_held_locks+0xf0/0xf0
[  306.773398]  ? __lock_acquire+0x6de/0x3ff0
[  306.773419]  ? __update_load_avg_se+0x5ec/0xa00
[  306.773436]  ? mark_held_locks+0xf0/0xf0
[  306.773459]  ? __lock_acquire+0x6de/0x3ff0
[  306.773485]  ? mark_held_locks+0xf0/0xf0
[  306.797338] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  306.803075]  ? _raw_spin_unlock_irq+0x24/0x80
[  306.803097]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  306.803112]  ? _raw_spin_unlock_irq+0x5a/0x80
[  306.803125]  ? finish_task_switch+0x146/0x760
[  306.803136]  ? finish_task_switch+0x118/0x760
[  306.803181]  ? mutex_trylock+0x1a0/0x1a0
[  306.803197]  ? check_preemption_disabled+0x41/0x280
[  306.803214]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  306.803235]  ? rtnl_getlink+0x620/0x620
[  306.803252]  rtnetlink_rcv_msg+0x453/0xb80
[  306.886043]  ? rtnl_calcit.isra.0+0x430/0x430
[  306.890551]  ? memcpy+0x35/0x50
[  306.893839]  ? netdev_pick_tx+0x2f0/0x2f0
[  306.897992]  ? __copy_skb_header+0x414/0x500
[  306.902407]  ? kfree_skbmem+0x140/0x140
[  306.906397]  netlink_rcv_skb+0x160/0x440
[  306.910457]  ? rtnl_calcit.isra.0+0x430/0x430
[  306.914938]  ? netlink_ack+0xae0/0xae0
[  306.918817]  netlink_unicast+0x4d5/0x690
[  306.922919]  ? netlink_sendskb+0x110/0x110
[  306.927152]  ? _copy_from_iter_full+0x229/0x7c0
[  306.931815]  ? __phys_addr_symbol+0x2c/0x70
[  306.936124]  ? __check_object_size+0x17b/0x3e0
[  306.940692]  netlink_sendmsg+0x6bb/0xc40
[  306.944750]  ? aa_af_perm+0x230/0x230
[  306.948542]  ? nlmsg_notify+0x1a0/0x1a0
[  306.952507]  ? kernel_recvmsg+0x220/0x220
[  306.956660]  ? nlmsg_notify+0x1a0/0x1a0
[  306.960633]  sock_sendmsg+0xc3/0x120
[  306.964356]  ___sys_sendmsg+0x7bb/0x8e0
[  306.968334]  ? check_preemption_disabled+0x41/0x280
[  306.973356]  ? copy_msghdr_from_user+0x440/0x440
[  306.978104]  ? __fget+0x32f/0x510
[  306.981541]  ? lock_downgrade+0x720/0x720
[  306.985685]  ? check_preemption_disabled+0x41/0x280
[  306.990695]  ? check_preemption_disabled+0x41/0x280
[  306.995699]  ? __fget+0x356/0x510
[  306.999138]  ? do_dup2+0x450/0x450
[  307.002666]  ? lock_downgrade+0x720/0x720
[  307.006814]  ? vfs_write+0x3d7/0x540
[  307.010645]  ? __fdget+0x1d0/0x230
[  307.014175]  __x64_sys_sendmsg+0x132/0x220
[  307.018406]  ? __sys_sendmsg+0x1b0/0x1b0
[  307.022493]  ? vfs_write+0x393/0x540
[  307.026217]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  307.031584]  ? trace_hardirqs_off_caller+0x6e/0x210
[  307.036592]  ? do_syscall_64+0x21/0x620
[  307.040557]  do_syscall_64+0xf9/0x620
[  307.044354]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  307.049597] RIP: 0033:0x4665e9
15:06:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xedc000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  307.052771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  307.071653] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.079368] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  307.086629] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  307.093915] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  307.101269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  307.108524] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  307.193594] IPv6: ADDRCONF(NETDEV_UP): veth124: link is not ready
15:06:27 executing program 2 (fault-call:6 fault-nth:20):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:27 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:27 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x10000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x4000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:27 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:27 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa8000}, 0x0, 0x60000fe})

[  307.337760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  307.353792] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  307.354778] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x100000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:27 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xa9000}, 0x0, 0x60000fe})

[  307.396458] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x200000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  307.455048] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  307.459066] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  307.483807] FAULT_INJECTION: forcing a failure.
[  307.483807] name failslab, interval 1, probability 0, space 0, times 0
[  307.521219] CPU: 0 PID: 16728 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  307.529127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  307.538479] Call Trace:
[  307.541091]  dump_stack+0x1fc/0x2ef
[  307.544735]  should_fail.cold+0xa/0xf
[  307.548549]  ? setup_fault_attr+0x200/0x200
[  307.552879]  ? lock_acquire+0x170/0x3c0
[  307.556876]  __should_failslab+0x115/0x180
[  307.561121]  should_failslab+0x5/0x10
[  307.564927]  __kmalloc+0x2ab/0x3c0
15:06:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x300000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  307.568472]  ? kobject_get_path+0xbf/0x240
[  307.572716]  kobject_get_path+0xbf/0x240
[  307.576789]  kobject_uevent_env+0x25c/0x1480
[  307.581209]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  307.585800]  dev_change_net_namespace+0x94c/0xe00
[  307.590656]  ? alloc_netdev_mqs+0xd50/0xd50
[  307.595016]  ? ns_capable+0xde/0x100
[  307.598733]  ? netlink_ns_capable+0xfd/0x130
[  307.603157]  do_setlink+0x192/0x3540
[  307.606887]  ? rtnl_fdb_add+0xa10/0xa10
[  307.610898]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  307.616097]  ? validate_nla+0x270/0x820
[  307.620083]  ? nla_parse+0x1b2/0x290
[  307.623808]  rtnl_newlink+0xda9/0x15c0
[  307.627742]  ? rtnl_getlink+0x620/0x620
[  307.631734]  ? __lock_acquire+0x6de/0x3ff0
[  307.635973]  ? __save_stack_trace+0x72/0x190
[  307.640384]  ? deref_stack_reg+0x134/0x1d0
[  307.644631]  ? mark_held_locks+0xf0/0xf0
[  307.648706]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  307.654603]  ? mark_held_locks+0xf0/0xf0
[  307.658675]  ? __lock_acquire+0x6de/0x3ff0
[  307.662934]  ? __update_load_avg_se+0x5ec/0xa00
[  307.667613]  ? mark_held_locks+0xf0/0xf0
[  307.671693]  ? __lock_acquire+0x6de/0x3ff0
[  307.675947]  ? mark_held_locks+0xf0/0xf0
[  307.680014]  ? _raw_spin_unlock_irq+0x24/0x80
[  307.684526]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  307.689133]  ? _raw_spin_unlock_irq+0x5a/0x80
[  307.693638]  ? finish_task_switch+0x146/0x760
[  307.698137]  ? finish_task_switch+0x118/0x760
[  307.702674]  ? mutex_trylock+0x1a0/0x1a0
[  307.706745]  ? check_preemption_disabled+0x41/0x280
[  307.711770]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  307.716456]  ? rtnl_getlink+0x620/0x620
15:06:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x400000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  307.720473]  rtnetlink_rcv_msg+0x453/0xb80
[  307.724719]  ? rtnl_calcit.isra.0+0x430/0x430
[  307.729227]  ? memcpy+0x35/0x50
[  307.732522]  ? netdev_pick_tx+0x2f0/0x2f0
[  307.736675]  ? __copy_skb_header+0x414/0x500
[  307.741091]  ? kfree_skbmem+0x140/0x140
[  307.745076]  netlink_rcv_skb+0x160/0x440
[  307.749142]  ? rtnl_calcit.isra.0+0x430/0x430
[  307.753641]  ? netlink_ack+0xae0/0xae0
[  307.757548]  netlink_unicast+0x4d5/0x690
[  307.761617]  ? netlink_sendskb+0x110/0x110
[  307.765858]  ? _copy_from_iter_full+0x229/0x7c0
[  307.770533]  ? __phys_addr_symbol+0x2c/0x70
[  307.774866]  ? __check_object_size+0x17b/0x3e0
[  307.779463]  netlink_sendmsg+0x6bb/0xc40
[  307.783537]  ? aa_af_perm+0x230/0x230
[  307.787341]  ? nlmsg_notify+0x1a0/0x1a0
[  307.791408]  ? kernel_recvmsg+0x220/0x220
[  307.795569]  ? nlmsg_notify+0x1a0/0x1a0
[  307.799554]  sock_sendmsg+0xc3/0x120
[  307.803277]  ___sys_sendmsg+0x7bb/0x8e0
[  307.807260]  ? check_preemption_disabled+0x41/0x280
[  307.812282]  ? copy_msghdr_from_user+0x440/0x440
[  307.817041]  ? __fget+0x32f/0x510
15:06:27 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x500000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  307.820515]  ? lock_downgrade+0x720/0x720
[  307.824672]  ? check_preemption_disabled+0x41/0x280
[  307.829693]  ? check_preemption_disabled+0x41/0x280
[  307.834720]  ? __fget+0x356/0x510
[  307.838181]  ? do_dup2+0x450/0x450
[  307.841726]  ? lock_downgrade+0x720/0x720
[  307.845882]  ? vfs_write+0x3d7/0x540
[  307.849608]  ? __fdget+0x1d0/0x230
[  307.853159]  __x64_sys_sendmsg+0x132/0x220
[  307.857398]  ? __sys_sendmsg+0x1b0/0x1b0
[  307.861462]  ? vfs_write+0x393/0x540
[  307.865193]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  307.870564]  ? trace_hardirqs_off_caller+0x6e/0x210
[  307.875584]  ? do_syscall_64+0x21/0x620
[  307.879570]  do_syscall_64+0xf9/0x620
[  307.883382]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  307.888573] RIP: 0033:0x4665e9
[  307.891772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  307.910678] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.918410] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  307.925671] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  307.932935] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  307.940196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  307.947457] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  307.979896] IPv6: ADDRCONF(NETDEV_UP): veth125: link is not ready
15:06:28 executing program 2 (fault-call:6 fault-nth:21):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x600000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:28 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x8040000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:28 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x13000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:28 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x4}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

15:06:28 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xaa000}, 0x0, 0x60000fe})

15:06:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x700000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  308.173357] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  308.220286] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:28 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x9000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:28 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x8}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  308.267674] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x800000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:28 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x20000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  308.363556] FAULT_INJECTION: forcing a failure.
[  308.363556] name failslab, interval 1, probability 0, space 0, times 0
[  308.377814] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  308.388872] CPU: 0 PID: 16798 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  308.396766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  308.406121] Call Trace:
[  308.408722]  dump_stack+0x1fc/0x2ef
15:06:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x900000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  308.412358]  should_fail.cold+0xa/0xf
[  308.416166]  ? setup_fault_attr+0x200/0x200
[  308.420414] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  308.420501]  ? lock_acquire+0x170/0x3c0
[  308.431215]  __should_failslab+0x115/0x180
[  308.435456]  should_failslab+0x5/0x10
[  308.439262]  kmem_cache_alloc_node+0x245/0x3b0
[  308.443861]  __alloc_skb+0x71/0x560
[  308.447500]  alloc_uevent_skb+0x7b/0x210
[  308.451572]  kobject_uevent_env+0x10f1/0x1480
[  308.456080]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  308.460664]  dev_change_net_namespace+0x94c/0xe00
[  308.465520]  ? alloc_netdev_mqs+0xd50/0xd50
[  308.466368] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  308.469853]  ? ns_capable+0xde/0x100
[  308.469872]  ? netlink_ns_capable+0xfd/0x130
[  308.469888]  do_setlink+0x192/0x3540
[  308.469909]  ? rtnl_fdb_add+0xa10/0xa10
[  308.499145]  ? __lock_acquire+0x6de/0x3ff0
[  308.503402]  ? mark_held_locks+0xf0/0xf0
[  308.507476]  ? set_next_entity+0xb52/0x1dc0
[  308.511805]  ? check_preemption_disabled+0x41/0x280
[  308.516827]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  308.522030]  ? validate_nla+0x270/0x820
[  308.526021]  ? nla_parse+0x1b2/0x290
[  308.529748]  rtnl_newlink+0xda9/0x15c0
[  308.533656]  ? rtnl_getlink+0x620/0x620
[  308.537639]  ? __lock_acquire+0x6de/0x3ff0
[  308.541860]  ? __save_stack_trace+0x72/0x190
[  308.546253]  ? deref_stack_reg+0x134/0x1d0
[  308.550475]  ? mark_held_locks+0xf0/0xf0
[  308.554519]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  308.560387]  ? mark_held_locks+0xf0/0xf0
[  308.564482]  ? __lock_acquire+0x6de/0x3ff0
[  308.568714]  ? __update_load_avg_se+0x5ec/0xa00
[  308.573376]  ? mark_held_locks+0xf0/0xf0
[  308.577423]  ? __lock_acquire+0x6de/0x3ff0
[  308.581646]  ? mark_held_locks+0xf0/0xf0
[  308.585701]  ? _raw_spin_unlock_irq+0x24/0x80
[  308.590185]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  308.594810]  ? finish_task_switch+0x1db/0x760
[  308.599333]  ? mutex_trylock+0x1a0/0x1a0
[  308.603378]  ? check_preemption_disabled+0x41/0x280
[  308.608377]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  308.612775]  ? rtnl_getlink+0x620/0x620
[  308.616766]  rtnetlink_rcv_msg+0x453/0xb80
[  308.620998]  ? rtnl_calcit.isra.0+0x430/0x430
[  308.625537]  ? memcpy+0x35/0x50
[  308.628799]  ? netdev_pick_tx+0x2f0/0x2f0
[  308.632929]  ? __copy_skb_header+0x414/0x500
[  308.637374]  ? kfree_skbmem+0x140/0x140
[  308.641333]  netlink_rcv_skb+0x160/0x440
[  308.645428]  ? rtnl_calcit.isra.0+0x430/0x430
[  308.649916]  ? netlink_ack+0xae0/0xae0
[  308.653802]  netlink_unicast+0x4d5/0x690
[  308.657848]  ? netlink_sendskb+0x110/0x110
[  308.662081]  ? _copy_from_iter_full+0x229/0x7c0
[  308.666742]  ? __phys_addr_symbol+0x2c/0x70
[  308.671047]  ? __check_object_size+0x17b/0x3e0
[  308.675616]  netlink_sendmsg+0x6bb/0xc40
[  308.679689]  ? aa_af_perm+0x230/0x230
[  308.683480]  ? nlmsg_notify+0x1a0/0x1a0
[  308.687437]  ? kernel_recvmsg+0x220/0x220
[  308.691569]  ? nlmsg_notify+0x1a0/0x1a0
[  308.695537]  sock_sendmsg+0xc3/0x120
[  308.699245]  ___sys_sendmsg+0x7bb/0x8e0
[  308.703207]  ? check_preemption_disabled+0x41/0x280
[  308.708209]  ? copy_msghdr_from_user+0x440/0x440
[  308.712948]  ? __fget+0x32f/0x510
[  308.716401]  ? lock_downgrade+0x720/0x720
[  308.720543]  ? check_preemption_disabled+0x41/0x280
[  308.725562]  ? check_preemption_disabled+0x41/0x280
[  308.730566]  ? __fget+0x356/0x510
[  308.734007]  ? do_dup2+0x450/0x450
[  308.737536]  ? lock_downgrade+0x720/0x720
[  308.741685]  ? vfs_write+0x3d7/0x540
[  308.745391]  ? __fdget+0x1d0/0x230
[  308.748925]  __x64_sys_sendmsg+0x132/0x220
[  308.753144]  ? __sys_sendmsg+0x1b0/0x1b0
[  308.757189]  ? vfs_write+0x393/0x540
[  308.760891]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  308.766260]  ? trace_hardirqs_off_caller+0x6e/0x210
[  308.771257]  ? do_syscall_64+0x21/0x620
[  308.775219]  do_syscall_64+0xf9/0x620
[  308.779021]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  308.784200] RIP: 0033:0x4665e9
[  308.787383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  308.806275] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.813981] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  308.821243] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  308.828491] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  308.835746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  308.843003] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  308.910462] IPv6: ADDRCONF(NETDEV_UP): veth126: link is not ready
[  308.948235] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:28 executing program 2 (fault-call:6 fault-nth:22):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xf}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)

15:06:28 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:28 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa00000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:28 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xab000}, 0x0, 0x60000fe})

15:06:28 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0xe}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  308.984131] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:28 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x30000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:29 executing program 1:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0xac000}, 0x0, 0x60000fe})

[  309.082210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  309.092673] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
15:06:29 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xb00000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

[  309.152005] overlayfs: "xino" feature enabled using 1 upper inode bits.
15:06:29 executing program 0:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x14}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1f8000000000}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xdc}}, 0x0)

[  309.205762] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  309.227244] FAULT_INJECTION: forcing a failure.
[  309.227244] name failslab, interval 1, probability 0, space 0, times 0
[  309.248496] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  309.271307] CPU: 1 PID: 16859 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  309.276790] overlayfs: "xino" feature enabled using 1 upper inode bits.
[  309.279209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  309.279219] Call Trace:
[  309.297912]  dump_stack+0x1fc/0x2ef
[  309.301551]  should_fail.cold+0xa/0xf
[  309.305366]  ? setup_fault_attr+0x200/0x200
[  309.309698]  ? lock_acquire+0x170/0x3c0
[  309.313684]  __should_failslab+0x115/0x180
[  309.317924]  should_failslab+0x5/0x10
[  309.321730]  __kmalloc_track_caller+0x2a6/0x3c0
[  309.326402]  ? device_rename+0x94/0x230
[  309.330388]  ? kobject_uevent_env+0x2b4/0x1480
[  309.334982]  kstrdup+0x36/0x70
[  309.338180]  device_rename+0x94/0x230
[  309.341989]  dev_change_net_namespace+0x461/0xe00
[  309.346841]  ? alloc_netdev_mqs+0xd50/0xd50
[  309.351176]  ? ns_capable+0xde/0x100
[  309.354906]  ? netlink_ns_capable+0xfd/0x130
[  309.359311]  do_setlink+0x192/0x3540
[  309.363021]  ? rtnl_fdb_add+0xa10/0xa10
[  309.366995]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  309.372168]  ? validate_nla+0x270/0x820
[  309.376127]  ? nla_parse+0x1b2/0x290
[  309.379825]  rtnl_newlink+0xda9/0x15c0
[  309.383699]  ? rtnl_getlink+0x620/0x620
[  309.387658]  ? __lock_acquire+0x6de/0x3ff0
[  309.391875]  ? __save_stack_trace+0x72/0x190
[  309.396267]  ? deref_stack_reg+0x134/0x1d0
[  309.400602]  ? mark_held_locks+0xf0/0xf0
[  309.404663]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  309.410533]  ? mark_held_locks+0xf0/0xf0
[  309.414581]  ? __lock_acquire+0x6de/0x3ff0
[  309.418808]  ? __update_load_avg_se+0x5ec/0xa00
[  309.423463]  ? mark_held_locks+0xf0/0xf0
[  309.427513]  ? __lock_acquire+0x6de/0x3ff0
[  309.431738]  ? mark_held_locks+0xf0/0xf0
[  309.435780]  ? _raw_spin_unlock_irq+0x24/0x80
[  309.440262]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  309.444829]  ? finish_task_switch+0x1db/0x760
[  309.449321]  ? mutex_trylock+0x1a0/0x1a0
[  309.453363]  ? check_preemption_disabled+0x41/0x280
[  309.458361]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  309.462757]  ? rtnl_getlink+0x620/0x620
[  309.466714]  rtnetlink_rcv_msg+0x453/0xb80
[  309.470937]  ? rtnl_calcit.isra.0+0x430/0x430
[  309.475427]  ? memcpy+0x35/0x50
[  309.478695]  ? netdev_pick_tx+0x2f0/0x2f0
[  309.482824]  ? __copy_skb_header+0x414/0x500
[  309.487215]  ? kfree_skbmem+0x140/0x140
[  309.491175]  netlink_rcv_skb+0x160/0x440
[  309.495221]  ? rtnl_calcit.isra.0+0x430/0x430
[  309.499699]  ? netlink_ack+0xae0/0xae0
[  309.503572]  netlink_unicast+0x4d5/0x690
[  309.507622]  ? netlink_sendskb+0x110/0x110
[  309.511837]  ? _copy_from_iter_full+0x229/0x7c0
[  309.516486]  ? __phys_addr_symbol+0x2c/0x70
[  309.520793]  ? __check_object_size+0x17b/0x3e0
[  309.525358]  netlink_sendmsg+0x6bb/0xc40
[  309.529407]  ? aa_af_perm+0x230/0x230
[  309.533198]  ? nlmsg_notify+0x1a0/0x1a0
[  309.537155]  ? kernel_recvmsg+0x220/0x220
[  309.541301]  ? nlmsg_notify+0x1a0/0x1a0
[  309.545257]  sock_sendmsg+0xc3/0x120
[  309.548953]  ___sys_sendmsg+0x7bb/0x8e0
[  309.552913]  ? check_preemption_disabled+0x41/0x280
[  309.557910]  ? copy_msghdr_from_user+0x440/0x440
[  309.562648]  ? __fget+0x32f/0x510
[  309.566086]  ? lock_downgrade+0x720/0x720
[  309.570221]  ? check_preemption_disabled+0x41/0x280
[  309.575220]  ? check_preemption_disabled+0x41/0x280
[  309.580220]  ? __fget+0x356/0x510
[  309.583654]  ? do_dup2+0x450/0x450
[  309.587174]  ? lock_downgrade+0x720/0x720
[  309.591303]  ? vfs_write+0x3d7/0x540
[  309.595000]  ? __fdget+0x1d0/0x230
[  309.598521]  __x64_sys_sendmsg+0x132/0x220
[  309.602734]  ? __sys_sendmsg+0x1b0/0x1b0
[  309.606773]  ? vfs_write+0x393/0x540
[  309.610472]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  309.615817]  ? trace_hardirqs_off_caller+0x6e/0x210
[  309.620813]  ? do_syscall_64+0x21/0x620
[  309.624767]  do_syscall_64+0xf9/0x620
[  309.628549]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  309.633815] RIP: 0033:0x4665e9
[  309.636991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  309.655869] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  309.663556] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  309.670820] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  309.678067] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  309.685326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  309.692579] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
15:06:29 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x342541c2, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

15:06:29 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x14812, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xc00000000000000, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]})

15:06:29 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0xa1e2144, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on}]})

[  309.704738] ------------[ cut here ]------------
[  309.712631] WARNING: CPU: 1 PID: 16859 at net/core/dev.c:9453 dev_change_net_namespace.cold+0x11/0x18
[  309.722002] Kernel panic - not syncing: panic_on_warn set ...
[  309.722002] 
[  309.729368] CPU: 1 PID: 16859 Comm: syz-executor.2 Not tainted 4.19.201-syzkaller #0
[  309.737235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  309.746601] Call Trace:
[  309.749191]  dump_stack+0x1fc/0x2ef
[  309.752815]  panic+0x26a/0x50e
[  309.755999]  ? __warn_printk+0xf3/0xf3
[  309.759914]  ? dev_change_net_namespace.cold+0x11/0x18
[  309.765187]  ? __probe_kernel_read+0x130/0x1b0
[  309.769760]  ? __warn.cold+0x5/0x5a
[  309.773381]  ? dev_change_net_namespace.cold+0x11/0x18
[  309.778651]  __warn.cold+0x20/0x5a
[  309.782184]  ? dev_change_net_namespace.cold+0x11/0x18
[  309.787449]  report_bug+0x262/0x2b0
[  309.791069]  do_error_trap+0x1d7/0x310
[  309.794948]  ? math_error+0x310/0x310
[  309.798739]  ? __irq_work_queue_local+0x101/0x160
[  309.803569]  ? irq_work_queue+0x29/0x80
[  309.807547]  ? error_entry+0x72/0xd0
[  309.811251]  ? trace_hardirqs_off_caller+0x6e/0x210
[  309.816260]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  309.821096]  invalid_op+0x14/0x20
[  309.824540] RIP: 0010:dev_change_net_namespace.cold+0x11/0x18
[  309.830410] Code: e8 64 16 51 f9 48 c7 c7 60 8e 4c 89 45 31 e4 e8 7b 12 e2 ff e9 15 86 64 fe e8 4b 16 51 f9 48 c7 c7 c0 7c 4c 89 e8 65 12 e2 ff <0f> 0b e9 fc 8d 64 fe e8 33 16 51 f9 89 d9 4c 89 e2 48 c7 c6 c0 b4
[  309.849300] RSP: 0018:ffff888041976d10 EFLAGS: 00010286
[  309.854647] RAX: 0000000000000024 RBX: 00000000fffffff4 RCX: 0000000000000000
[  309.861909] RDX: 0000000000040000 RSI: ffffffff814dfd61 RDI: ffffed100832ed94
[  309.869177] RBP: ffff88803d6d8540 R08: 0000000000000024 R09: 0000000000000000
[  309.876447] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88803d6d85e8
[  309.883702] R13: ffff88803d6d8af0 R14: ffffffff8ae25880 R15: 000000000000006a
[  309.890980]  ? vprintk_func+0x81/0x180
[  309.894871]  ? alloc_netdev_mqs+0xd50/0xd50
[  309.899193]  ? ns_capable+0xde/0x100
[  309.902906]  ? netlink_ns_capable+0xfd/0x130
[  309.907310]  do_setlink+0x192/0x3540
[  309.911022]  ? rtnl_fdb_add+0xa10/0xa10
[  309.915008]  ? __sanitizer_cov_trace_switch+0x4b/0x80
[  309.920191]  ? validate_nla+0x270/0x820
[  309.924157]  ? nla_parse+0x1b2/0x290
[  309.927866]  rtnl_newlink+0xda9/0x15c0
[  309.931750]  ? rtnl_getlink+0x620/0x620
[  309.935720]  ? __lock_acquire+0x6de/0x3ff0
[  309.939947]  ? __save_stack_trace+0x72/0x190
[  309.944343]  ? deref_stack_reg+0x134/0x1d0
[  309.948565]  ? mark_held_locks+0xf0/0xf0
[  309.952612]  ? __read_once_size_nocheck.constprop.0+0x10/0x10
[  309.958505]  ? mark_held_locks+0xf0/0xf0
[  309.962577]  ? __lock_acquire+0x6de/0x3ff0
[  309.966823]  ? __update_load_avg_se+0x5ec/0xa00
[  309.971518]  ? mark_held_locks+0xf0/0xf0
[  309.975576]  ? __lock_acquire+0x6de/0x3ff0
[  309.979812]  ? mark_held_locks+0xf0/0xf0
[  309.983865]  ? _raw_spin_unlock_irq+0x24/0x80
[  309.988357]  ? lockdep_hardirqs_on+0x3a8/0x5c0
[  309.992937]  ? finish_task_switch+0x1db/0x760
[  309.997453]  ? mutex_trylock+0x1a0/0x1a0
[  310.001506]  ? check_preemption_disabled+0x41/0x280
[  310.006513]  ? rtnetlink_rcv_msg+0x3c3/0xb80
[  310.010921]  ? rtnl_getlink+0x620/0x620
[  310.014902]  rtnetlink_rcv_msg+0x453/0xb80
[  310.019142]  ? rtnl_calcit.isra.0+0x430/0x430
[  310.023630]  ? memcpy+0x35/0x50
[  310.026906]  ? netdev_pick_tx+0x2f0/0x2f0
[  310.031055]  ? __copy_skb_header+0x414/0x500
[  310.035461]  ? kfree_skbmem+0x140/0x140
[  310.039452]  netlink_rcv_skb+0x160/0x440
[  310.043501]  ? rtnl_calcit.isra.0+0x430/0x430
[  310.047984]  ? netlink_ack+0xae0/0xae0
[  310.051871]  netlink_unicast+0x4d5/0x690
[  310.055929]  ? netlink_sendskb+0x110/0x110
[  310.060152]  ? _copy_from_iter_full+0x229/0x7c0
[  310.064821]  ? __phys_addr_symbol+0x2c/0x70
[  310.069137]  ? __check_object_size+0x17b/0x3e0
[  310.073795]  netlink_sendmsg+0x6bb/0xc40
[  310.077846]  ? aa_af_perm+0x230/0x230
[  310.081631]  ? nlmsg_notify+0x1a0/0x1a0
[  310.085617]  ? kernel_recvmsg+0x220/0x220
[  310.089968]  ? nlmsg_notify+0x1a0/0x1a0
[  310.093944]  sock_sendmsg+0xc3/0x120
[  310.097655]  ___sys_sendmsg+0x7bb/0x8e0
[  310.101640]  ? check_preemption_disabled+0x41/0x280
[  310.106667]  ? copy_msghdr_from_user+0x440/0x440
[  310.111426]  ? __fget+0x32f/0x510
[  310.114881]  ? lock_downgrade+0x720/0x720
[  310.119049]  ? check_preemption_disabled+0x41/0x280
[  310.124079]  ? check_preemption_disabled+0x41/0x280
[  310.129095]  ? __fget+0x356/0x510
[  310.132539]  ? do_dup2+0x450/0x450
[  310.136067]  ? lock_downgrade+0x720/0x720
[  310.140207]  ? vfs_write+0x3d7/0x540
[  310.143919]  ? __fdget+0x1d0/0x230
[  310.147456]  __x64_sys_sendmsg+0x132/0x220
[  310.151770]  ? __sys_sendmsg+0x1b0/0x1b0
[  310.155819]  ? vfs_write+0x393/0x540
[  310.159533]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  310.164893]  ? trace_hardirqs_off_caller+0x6e/0x210
[  310.169907]  ? do_syscall_64+0x21/0x620
[  310.174132]  do_syscall_64+0xf9/0x620
[  310.177925]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  310.183105] RIP: 0033:0x4665e9
[  310.186285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  310.205171] RSP: 002b:00007f233c460188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.212873] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9
[  310.220147] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  310.227409] RBP: 00007f233c4601d0 R08: 0000000000000000 R09: 0000000000000000
[  310.234666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  310.241926] R13: 00007ffd978618bf R14: 00007f233c460300 R15: 0000000000022000
[  310.251163] Kernel Offset: disabled
[  310.254830] Rebooting in 86400 seconds..