bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r7, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18:20:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlayd', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:18 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:18 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 18:20:18 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xfe', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:18 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x2) 18:20:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:18 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4X', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:18 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r4 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) write$UHID_INPUT(r4, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x1006) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000180)={0x33, 0x6, 0x0, {0x2, 0x5, 0xa, 0x0, '/dev/ptmx\x00'}}, 0x33) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x10000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000140)={0x80, 0x1, 0x8}) [ 1918.123651] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1918.161214] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:18 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x3) 18:20:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:18 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1918.339231] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1918.398571] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:19 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 18:20:19 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x4) 18:20:19 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:19 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:19 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x60021, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x101}}, {@timeout={'timeout', 0x3d, 0x2}}, {@sq={'sq', 0x3d, 0x8001}}, {@rq={'rq', 0x3d, 0x76b}}, {@common=@nodevmap='nodevmap'}], [{@audit='audit'}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r2}}, {@dont_hash='dont_hash'}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@dont_appraise='dont_appraise'}]}}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) writev(r0, &(0x7f0000000000), 0x0) [ 1918.643816] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:19 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x6) [ 1918.705935] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1918.743958] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1918.770931] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1918.788150] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1918.846841] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1919.022841] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:19 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:20:19 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xa) 18:20:19 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1919.062963] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1919.204845] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1919.240712] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1919.290228] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1919.308209] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1919.328379] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1919.355842] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:20 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) socket$inet6_sctp(0xa, 0x5, 0x84) 18:20:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:20 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xc) 18:20:20 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) prlimit64(r0, 0x0, &(0x7f00000000c0)={0x2, 0x200000000c7}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x4e72a8b3e19a6058, 0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:20:20 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1919.544073] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:20 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x12) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="b95a926aae9ae1a5fe729db97826b8dffc4e15ecd6e89c745c1277b58d53203f3a99a73be62803b93a0dc5fc325ac9e7e59d212bc2085a259f60a37e44add53b64115c8333f5febea563933d90eca1d5380a199781d79d09c721730451467525ed7e64df4b6dca97fa163c685f6a7ce1cb0d0b2b1ad168307db0402ddfe876d7fe75a400439feac8bebd2ccc9d892d8606017c45101c5740896db23d55c50e7a87090b6099b6daeeb843be778373dc1b0627dae144c0448b145ff495c01c3a1490ff428cc0db"], &(0x7f0000000100), 0x1e00) [ 1919.582465] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:20 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xe) [ 1919.641500] net_ratelimit: 17 callbacks suppressed [ 1919.641509] protocol 88fb is buggy, dev hsr_slave_0 [ 1919.651658] protocol 88fb is buggy, dev hsr_slave_1 [ 1919.656807] protocol 88fb is buggy, dev hsr_slave_0 [ 1919.661958] protocol 88fb is buggy, dev hsr_slave_1 18:20:20 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, r2}}, 0x18) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0xbc, 0x202000) r6 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r6, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={@mcast1, @dev={0xfe, 0x80, [], 0x19}, @mcast1, 0x7, 0x6, 0x80, 0x400, 0x1000, 0x4299db7f0b37cc2c, r7}) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r4, r8, 0x0, 0x10000) 18:20:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:20 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x2, 0x71d5, 0x100, 0x2, 0x12, 0x81}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="576f81fa000000002191bd1f2b5d5e4f89ca813bef800b387ea9e50cdaf2a5210a7937e3c2ebd7616742d5fa9645256147764f0dc9b832afec5d9d1c4570eb4da4ea7dc73d39dd878ca0aa5d7278c0733533ee422f858e311d32bf34d9492682acee5734e98286b0f94151a3ae6b2caa07a122cc49c3508efdd78cb5f8d49f471f480c459287fd2fe76f08d54699a7f3e1eab3ad04c1277d5049be0334d06587b8a472f85152966902a877e7117f6f695d1a74b543debfed6172f0dbd0eb07e2927cac13b400aa378852c337a5f48685eee64adb79128da89dd53452099a29652e1ef4567d9539fdffda84"], &(0x7f0000000100), 0x0) [ 1919.806112] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1919.839297] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1919.877587] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1919.907862] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:20 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf) [ 1919.934981] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1919.977743] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1920.063829] kauditd_printk_skb: 8 callbacks suppressed [ 1920.063842] audit: type=1804 audit(1574533220.738:7841): pid=19448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/606/file0/file0" dev="sda1" ino=16546 res=1 [ 1920.111521] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.115071] audit: type=1800 audit(1574533220.768:7842): pid=19448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16546 res=0 [ 1920.116621] protocol 88fb is buggy, dev hsr_slave_1 18:20:20 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r6) 18:20:20 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x10) [ 1920.229616] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1920.253309] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:20 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1920.353281] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.359850] protocol 88fb is buggy, dev hsr_slave_1 18:20:21 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x60) [ 1920.422020] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1920.482439] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1920.528168] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:21 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf0) 18:20:21 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1920.578656] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1920.590304] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1920.611588] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1920.751505] protocol 88fb is buggy, dev hsr_slave_0 [ 1920.751510] protocol 88fb is buggy, dev hsr_slave_0 18:20:21 executing program 1: r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0xffe0000000000000, 0x0, 0x11, &(0x7f0000ffc000/0x3000)=nil, 0x1}) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:20:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:21 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x300) 18:20:21 executing program 2: prctl$PR_GET_CHILD_SUBREAPER(0x25) creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1920.840058] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:21 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) clock_gettime(0x6, &(0x7f00000000c0)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000140)={{r1, r2/1000+30000}, 0x17, 0x7, 0x5}, 0x18) creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[], &(0x7f0000000100), 0x0) [ 1920.890471] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1920.905516] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1920.927965] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1920.942027] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1920.956495] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1921.067508] audit: type=1804 audit(1574533221.738:7843): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/607/file0/file0" dev="sda1" ino=16601 res=1 18:20:21 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1921.126463] audit: type=1800 audit(1574533221.738:7844): pid=19511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16601 res=0 18:20:21 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16, 0x2}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000140), &(0x7f0000000180)) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x52002, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0xff}}, {@mode={'mode', 0x3d, 0x100}}, {@mode={'mode', 0x3d, 0xdf}}, {@mode={'mode', 0x3d, 0x80000000}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x80}}], [{@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x36, 0x65, 0x63, 0x37, 0x62, 0x30, 0x1], 0x2d, [0x36, 0x31, 0x64, 0x33], 0x2d, [0x9a030d2c2d07db97, 0x35, 0x61, 0x31], 0x2d, [0x66, 0x30, 0x0, 0x65], 0x2d, [0x77, 0x39, 0x68, 0x66, 0x36, 0x62, 0x30, 0x39]}}}, {@euid_lt={'euid<', r2}}]}) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r3, 0x0, 0x10000) 18:20:21 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x600) 18:20:21 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x4a, 0x0, "3ed52b9bddc6eb2ca598ec5e736a2e4da0b03b430300000000000400d6b123a1287d2bd097f449495a67c0087ece7f2ed6f7c7faba3ddbabf4ed3b7bed2a322de208"}, &(0x7f0000000100), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 18:20:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x01', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:21 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:21 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="080000000000000095fd842962a102adc22bb092fa706e71b3b6ce7188cda6c554567ebd9b0d89bc63d5e24c5435efa6703ff73c10cbd7daca4610caaacb8e18a004e551fab8bb8b67e3aa68d6ddd25253f2215f139ca56b34b43d62705fa2d83c60f7e957fe72f4f4d55a30cfc4457584797d7bbc9084d5436e19ccfe2adcf97bb7bb6649a10ce87191333ec825862db9"], &(0x7f0000000100), 0x0) [ 1921.299996] FAT-fs (loop1): invalid media value (0x70) [ 1921.323898] audit: type=1804 audit(1574533221.998:7845): pid=19532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/608/file0/file0" dev="sda1" ino=16537 res=1 [ 1921.351877] FAT-fs (loop1): Can't find a valid FAT filesystem 18:20:22 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xa00) 18:20:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1921.437523] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:22 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8, 0x4}, &(0x7f0000000100), 0x0) [ 1921.498130] audit: type=1800 audit(1574533221.998:7846): pid=19532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16537 res=0 [ 1921.524302] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:22 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40800, 0x1db) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) sendfile(r1, r2, 0x0, 0x10000) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, r3}, 0xc) [ 1921.592306] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:22 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xc00) [ 1921.633588] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1921.656705] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1921.698862] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:22 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) 18:20:22 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) 18:20:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:22 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:22 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xe00) 18:20:22 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r3 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r4 = gettid() tkill(r4, 0x1000000000013) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x6, 0x3d, 0x400000, 'syz1\x00', 0x1f}, 0x6, 0x4, 0x40, r4, 0x5, 0x40, 'syz1\x00', &(0x7f0000000000)=['vfat\x00', 'vfat\x00', '}/$cpuset\\vboxnet1mime_type\x11\xec[wlan1/\x00', '.(\\ppp0\x00', 'vfat\x00'], 0x3c, [], [0x54, 0x3f, 0x80, 0x25b]}) sendfile(r1, r2, 0x0, 0x10000) [ 1922.144140] audit: type=1804 audit(1574533222.818:7847): pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/610/file0/file0" dev="sda1" ino=16691 res=1 [ 1922.179227] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:22 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf00) 18:20:22 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="8515b30d7938b438"], &(0x7f0000000100), 0x0) [ 1922.259650] audit: type=1800 audit(1574533222.818:7848): pid=19585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16691 res=0 18:20:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1922.348100] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:23 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) mknod(&(0x7f0000000080)='./file0\x00', 0x4040, 0xc8) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r2 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x26bbab44, 0x800) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="1f000000000000006b7b7be2c5ceae32818de6d85fa3f392ffc33b897c92c2ef2ff652d77cfc6914a0aebdc8b0f410279f9968a76f38301400a41d7ee52793b10a985032004cb959234b097877f5b713fa1e47e10b0f4658a828354dda261bd6414ed3ea35d310256b5de448527ade18bbac1a3924eaef9bded7813791ce9a95315f1ed50aa959f2def7ba76546016c296255ed447d342a27a2b974ad0221b07ba1e"], &(0x7f0000000100), 0x0) open(&(0x7f0000000000)='./file0\x00', 0xbf4b1eaa4fa10fe2, 0x40) 18:20:23 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x3f00) 18:20:23 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1922.628987] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1922.691138] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1922.735920] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1922.765707] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1922.776449] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1922.802419] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:23 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) 18:20:23 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x5865) 18:20:23 executing program 2: r0 = creat(0x0, 0x44) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000240)) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x4, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000000)='ip6tnl0\x00', 0x1ff, 0xd8}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf250300000008000600160000000800060002000800090004000000080003000500000008000300020000000800040005000000400003000800010002000000140002006e723000000000000000000000000000080007004e2000000800010000000000050000000100000008000100011f00000000000000ffffff"], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x24008041) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000280)) creat(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f00000003c0)='./file0\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000380)=0x10) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x01', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:23 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1923.193066] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1923.231589] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1923.270814] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1923.331211] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1924.911531] net_ratelimit: 22 callbacks suppressed [ 1924.911541] protocol 88fb is buggy, dev hsr_slave_0 [ 1924.911557] protocol 88fb is buggy, dev hsr_slave_0 [ 1924.917792] protocol 88fb is buggy, dev hsr_slave_1 [ 1924.923054] protocol 88fb is buggy, dev hsr_slave_1 18:20:25 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0xbea594264ebdaec, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:20:25 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x6000) 18:20:25 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x02', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:25 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000000000000000003000000000100000002000000090000000000000000000001ffffffff10000000000084bebdfc0c2b0300000042c39f058bb70b96a92594acaa05767bf844101ff5f0fc49f008efc2d91384131bbd9803e074d550e32dbc3aabbc966e4290804e9978cfc8a3dec7f1c758e66b65194b4a69ff4e1b2986c36dafcf673011c14eecb82aa42fee6a054e9cb8b3f0ae26dcee062fa5f31cef1f2369"], &(0x7f0000000100)=""/213, 0x42, 0x288, 0xfffffffffffffffd}, 0x20) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r2 = accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r7 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r7, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r7, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x80, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000006c0)={0x80000010}) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="94c9c57f7f4a6d3ca4984f2289a84f32f656a0cff835bcf43c59d67c6f6316fd6b7a65f6e5f65449597f74fd5b347a26279a67b6ce377f4c553cb0469c7751cf97ce2834a9f7e5d5d581f5a00fc119aa36fd1fc3b24e332cc96b8f7328971ce3ac9dc974bebfee6d59fb595c7d0bebec87f5bb9d5df895fe2c00afef9dd026e5d4d449a937aeeb9c739d696f7a51", 0x8e) recvmmsg(r9, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r10 = fcntl$dupfd(r6, 0x0, r9) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$sndseq(r10, &(0x7f00000004c0)=[{0x6, 0xfa, 0xdb, 0x8, @tick=0x20000000, {0xfa, 0xb8}, {0x0, 0x6}, @time=@time={r11, r12+10000000}}, {0x7, 0xf8, 0x5, 0x9, @time={0x77359400}, {0xd9}, {0xbc, 0x90}, @connect={{0x7, 0xea}, {0x2, 0x7f}}}, {0x7f, 0x9c, 0x9, 0x9, @tick=0x6, {0x8a, 0xff}, {0x6, 0x1}, @addr={0x3f}}, {0x5, 0x40, 0x80, 0x76, @time, {0x7}, {0x3, 0x8e}, @addr={0x8, 0x7f}}, {0x1, 0x7f, 0x4, 0x1, @tick=0x9, {0x3f, 0x20}, {0x2c, 0x2}, @note={0x4, 0x2, 0x4, 0x1c, 0x80000000}}, {0x5, 0x9, 0x40, 0x1, @tick=0x1, {0x1, 0x7f}, {0x3, 0x65}, @connect={{0x1, 0xd1}, {0x39, 0x1}}}], 0x120) fchownat(r0, &(0x7f0000000000)='./file0\x00', r3, r5, 0x100) 18:20:25 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, 0x0) perf_event_open(0x0, r4, 0x204, r5, 0x10) 18:20:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1925.287062] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x6558) [ 1925.350273] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1925.380219] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:26 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x22) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x4, 0x0, 0x5, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x10000}, &(0x7f0000000180)=0x8) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x10010, r2, 0x88) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r4, 0x0, 0x10000) [ 1925.422322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1925.493415] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1925.510227] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:26 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x8100) [ 1925.672439] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf000) [ 1925.743535] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1925.765209] audit: type=1804 audit(1574533226.438:7849): pid=19696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/612/file0/file0" dev="sda1" ino=16786 res=1 18:20:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1925.855482] audit: type=1800 audit(1574533226.438:7850): pid=19696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16786 res=0 [ 1925.878679] protocol 88fb is buggy, dev hsr_slave_0 [ 1925.878729] protocol 88fb is buggy, dev hsr_slave_1 [ 1925.878808] protocol 88fb is buggy, dev hsr_slave_0 [ 1925.878846] protocol 88fb is buggy, dev hsr_slave_1 [ 1925.899800] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1925.912685] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1925.930599] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x34000) [ 1925.960761] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:26 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="08000000001d0000"], &(0x7f0000000100), 0x0) 18:20:26 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1926.061296] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x400300) 18:20:26 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1926.138356] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:26 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000000100), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000880)={0x3, 0x1, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000480)={0x2, 0x1, [{0x80000000, 0x0, 0x7}, {0x2, 0x0, 0x8}]}) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000003c0)=0x301, 0x4) r5 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r6 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r7 = accept4(r6, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) accept4(r7, &(0x7f00000008c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0xba, 0x0) ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f00000004c0)) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="20000000009df100000089e55827b3304567d7043ceb5449ccca0224fa1b5c3589be74b611763ce52b4e653aeb9a3abd7278976f669d32b94e6518796278a1a1e400b068bf1fc0c50507cbfaf716de1ce5cfbc6d24b165cb3af7cc0efeb4f2854b090a65f387946f20175541f45d6d9dabc4062990b2f74d730276961ac36b6dfeed87ff3698c811cc336a9d78b61c2244c05675d09172947d5eef9df35a612b1c10fc21b9715aeea22c4bf63da98ef186715babad824e65", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_G_CTRL(0xffffffffffffffff, 0xc008561b, &(0x7f0000000500)={0x850, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x80}], &(0x7f00000000c0)='syzkaller\x00', 0x20, 0xdc, &(0x7f00000001c0)=""/220, 0x40f00, 0x1, [], r8, 0x10, r9, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x4, 0x1506, 0x18334496}, 0x10}, 0x70) r10 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r10, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r10, 0xc0286415, &(0x7f0000000380)={&(0x7f0000ffd000/0x1000)=nil, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="090000000000000002004e24ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac1e010100000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2400"/528], 0x210) [ 1926.332535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40192 sclass=netlink_route_socket pig=19742 comm=syz-executor.2 [ 1926.352415] protocol 88fb is buggy, dev hsr_slave_0 [ 1926.358592] protocol 88fb is buggy, dev hsr_slave_1 [ 1926.448301] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x03', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:27 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf0ffff) 18:20:27 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x30042, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000000c0)={0x6, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @dev}]}) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000000)={0x20, 0x2, 0x80b4, 0x2, 0xe033}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r3, r4, 0x0, 0x10000) [ 1926.505076] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1926.521538] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1926.552368] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x02', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:27 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x1000000) 18:20:27 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1926.740253] audit: type=1804 audit(1574533227.408:7851): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/613/file0/file0" dev="loop1" ino=509 res=1 [ 1926.774342] audit: type=1800 audit(1574533227.408:7852): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=509 res=0 18:20:27 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x2000000) 18:20:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x01', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1926.837266] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1926.877418] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:27 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1926.896712] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1926.920161] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:27 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x3000000) 18:20:27 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:27 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x2, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xcfa7, 0x2) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x01', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:27 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x54) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1927.397664] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1927.428463] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1927.438894] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:28 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) quotactl(0x14000, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)="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") fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x1000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r1}) 18:20:28 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x4000000) 18:20:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x01', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:28 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x800, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000740)={&(0x7f0000001440)=ANY=[@ANYRES16=r3, @ANYBLOB="f0c32abd7000fcdbdf250300e5ff14000200080004000800000008000400000000003c000200080004000000000008000400ff03000008000b0002000000080006000600000008000900070000000800080005000020080009000a350000080005000300000059d4781dbedc9937f10df14de3b39c3bbdfc6aab1aa333f5b7914fc9cb6ef720d97ac2b7b44f1a400b481f659cf8b0cfaf99d957f61cb65eeac64fadfa3493b2ca620efd4f67757c74331e6c367a6630d971a41325ce2a192481d928073c050ad92fce4dbbc932f1166557722bde61a661961014655ccbe29b96cf5ad9961d20d6c6aeee40972f5c7fe366401345f3af337ebc154cb9c5e0e474212332b5c4b540a7dda1fc364678a5a02d90ec61930acfdb3767ed32257e18ee176bd048862b8fce4f3e6bea782e9b1860c051802549ccdb420af2b710e633903b0a79b0600747f77d79762d1c8c94ff12ecda7c9ccd7b2fddc7e98f328869b3405847621cf33b18a77fcd2c9c72456a2257ecf17a43bedb8d813bbe1c6b7765ebb2fbc25c"], 0x2}, 0x1, 0x0, 0x0, 0x80}, 0xb0ddd38a6cfd4e8a) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000002}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x64, r3, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4a6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf8cb9f3b15dadb5a}, 0x4000040) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:28 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1927.455086] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:28 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x6000000) [ 1927.657233] audit: type=1804 audit(1574533228.328:7853): pid=19837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/614/file0/file0" dev="loop1" ino=510 res=1 [ 1927.744462] audit: type=1800 audit(1574533228.358:7854): pid=19837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=510 res=0 18:20:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xc0', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:28 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r3 = accept4(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet6_dccp_int(r2, 0x21, 0x5, &(0x7f0000000080), &(0x7f0000000140)=0x4) faccessat(r1, &(0x7f0000000000)='./file0/../file0\x00', 0x44, 0x80) r5 = gettid() tkill(r5, 0x1000000000013) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000300)={0x5, 0xffff, 0x0, 0x8}, 0x8) r7 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r8 = accept4(r7, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x64, "c4b964aeec45b50ba3b1908540133322f5462329d74d7607f620f110e6b41b8a0987940ef83d7ac9467bb06bd1f1381068dfc4eb30b41e03a2799f9720b045ccd87e50f6794a485b590e5a69a12804777cb86b8dd1d30e35c418a067c42f8b8b30d056ac"}, &(0x7f0000000740)=0x6c) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000780)={r10, 0x10000}, &(0x7f00000007c0)=0x8) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYPTR=&(0x7f0000000540)=ANY=[@ANYRES16=r3, @ANYRESHEX=r3, @ANYBLOB="006395f009b8bdf343aa2c8d9df47c0ecb54ca3e023a74d0dc839a7d02dd16a591734a3f98bac1611b1acde4ca2873a589dd7e50679e8caf2017180d0f7c3cadb91e9c1c22152f2e18b631cc627b69c95a8a3db9b42a5b500cf1ee6e19242058a6908ee1f672b816285ed9f6afd59f77ab4de7e3fb42b303343a6a5188623cbbe0e47e4d739a4b04175156abf652cc04deb491923a1f5f9229f104426ee5a0df51a8aab0d8ed37440b3b39e012a242a4d928501b39139702cda8e244d98608d67437a43c687a84679c37301c2a613916d40fc1b225c65da2a81b71dd01", @ANYBLOB="da70c41e456b2d2b4ba382ac5a2b1708f39be01029c7a8e76decad6cb5d50a72a1557865b36d14eed82c85f00fd45c53d76cc3ef9093b0a396745b1c8709db56e8593efce794358ef077188ce478b1e3a6062efa6272888a98c00a88451dcf8f830b070238b5a19353ab28cc775f0f8b19fe5eefdb1b5352087ecf4f60276d9c705f1fd8386813d74bdb22356575804632af77e2f5665d24fb90353ce8bf950e5897f244eed7740644b9422fa59e242e6f28af1b31cc38a5b8ff19906afea0bc2a66aa1553488794f6ade889e18884158c9f8e58d3d0e38a21ff929b", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRESOCT=r5, @ANYBLOB="c504faf2927a4d752ab91c", @ANYRESHEX, @ANYPTR64, @ANYRESOCT=0x0], @ANYRES32=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYRES16, @ANYRES64, @ANYPTR64, @ANYBLOB="1b3a481b7202cd286bc7a59add75b28340e24e6c624c0b1e9bb956d1e003b363034f8c84cd95ab86cf3041ac88b5f027149105bab73149c71ac8fa8a3dc9f39a387adbc2d269f402caddf4934ca0d0d6c1d6a9a8f22347621e75baaa08875771eb433b1ea3f99062219a5699e248865b253e7b114ff9616b0ca68120359e0be4d970f075a1713e5e2bbe9c64d8ccd00fef8748a70a289788e0276ba773d6026fe2f623c906ca01eaedae3946737a3980971a2b8dac58869a877af6eb99b1ab22113d2b96a739611c8553cfc375589dc480b134ffaf63"]]], &(0x7f0000000100), 0x0) 18:20:28 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x0, 0x8}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x80000, 0x48) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r0, r1, 0x0, 0x10000) 18:20:28 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1927.787920] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1927.811521] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1927.832700] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:28 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xa000000) [ 1927.864941] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:28 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000240)=""/68) prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='\xf8fat\x00', &(0x7f0000000040)='./file0\x00', 0x800000000e004, 0x7, &(0x7f00000018c0)=[{&(0x7f0000000140)="c1561636100c3c376d83b1684a14e8276546dd2a3085a87488aad338337c6f3d2dd84769283038e7588d1eea597d11007aef6f4fc6814974b247ee54cc3b7e778333e74267", 0x45, 0x80}, {&(0x7f00000003c0)="b6e0e575b7041ab4b002777103934fdfe9159fda9bd5e3d53c1ff76fa2da1d066fe1d12c6e4308b9d39091a8184e283f73324c80a5d61e29f61eb69600ab666dbed32dcaa633874fb3764ecd3e2acb19d8f728e6715bbc60c55410ca3cfa26a645c284b89af65681c3ce2d683835e18f900e1c7e9038bd67ad61f1d2dacc007d6b9204c9bd04cedd9eeed1a8a85d8caf3d689c95824e9f5660f58c79e12e8b2a7a349e946d5d874b5cf3bf5538373e6ddca91ed9dbbe65d0e3354e1df2b14d6ea365dca1b63a999498cec467f7095b2c8560675f0c74", 0xd6, 0x3}, {&(0x7f0000000580)="f1d63fd65b2f2b937ce579ac415f86777c2212a6f834e0996d1c947464f4a35f37545389a9dc5e4307ba4843349660c342d14e8af05485bfb50a02baa2fb61f3eb2b17dc85b522e6e89aadeae5b3331149334a102ad902f5002e9aecc9819ab18be11d281a76f5b106c6968f1c0b9dee4ea07bea1e1c283afc3e62cd481a7acd6b8eecbe80b030144d7fece25c449b4c9f208e4e9fb2e660299cc5dbed5449641c937bf0538e4ee9cc7ad2f25ede03d752de8f53cecaa2ec0993f7f93f1d32422d", 0xc1, 0x2}, {&(0x7f0000000680)="85a2ca3b1e9a865f0b1f8597c9315f3d833405b414d4d7fe3ebd426d2d76308976b0b1d92ebc2eab391fe5214e34ba468350aed8b1305f2aa48cdf14620449c4cac7e02f88663e8f04e61a54fa7712ac73fcbc81596ed307920c8d0a6a6cd94a450bff49252bba0af066cd984b00f2955314f680b1b848c80d56b975f03631afef3bb277434dcf9a27689a54095dfd8c0f19d3954373d11e6bc7", 0x9a, 0x7}, {&(0x7f0000000740)="82770e9e106fef7ec66094ab4e5e3718bec86b30101a791225575bd094d42c55b0ee6544ba1d0d1d4b77015e5b4c05f722bc0cdacce7766aa5906f1fcb202968e36f556c966d978c5c06ae3dd4342408f570f0a9f4dfae3ec09c63809871d57458476e470c5c5d0d47df31a220d28f56e6671f4be9d78085b164481c82cb569304f7d4e27c0c0de0cd4e5189ac076946de5e13ca0097faabb78b772617f1bf1460ef9da95ad9bdb754c948b0f88697632027d5bb01476d1a2e604ef2", 0xbc, 0x80}, {&(0x7f0000000800)="a70a4600e93628444897af15ef3498421d6b575e0a3375ecb62d2ee8adc54518af51243adc1add4f43a581ed92e3182a0ec171663ff68435f0797288c514f5c9eb4e407d6d3d7f6bb3b66e50f6db024270a743d24f0a700a9166f16102fc0290d35c4b61b047af55538936576b9061a6ad09393427fdb7804135a0a50da2bf0edd30a9b4b6ba4822c1215802cf39d60748f879a984212532853beb9e858dfc46e22d4eb9aabb7fa9d36d13d6259088", 0xaf, 0x80000000}, {&(0x7f00000008c0)="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", 0x1000, 0xfffffffffffff56b}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000002c0)={0x7, 0xb5, {0x51, 0x8, 0x1, {0x9, 0x1a}, {0x9, 0x7f}, @ramp={0x1, 0x7fff, {0x80, 0x6, 0xfffc, 0x3}}}, {0x2b, 0x4, 0xb5a, {0x40, 0x5}, {0x6, 0x2b4}, @rumble={0x0, 0x9}}}) r5 = gettid() tkill(r5, 0x1000000000013) ioprio_set$pid(0x5, r5, 0x5) socket$inet(0x2, 0x5, 0xd) 18:20:28 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:28 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xc000000) 18:20:28 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xe000000) [ 1928.211256] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1928.276553] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1928.295191] audit: type=1804 audit(1574533228.968:7855): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/616/file0" dev="sda1" ino=16690 res=1 18:20:29 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1928.344395] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1928.374411] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:29 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf000000) [ 1928.393357] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1928.418382] audit: type=1800 audit(1574533229.088:7856): pid=19890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16690 res=0 [ 1928.510465] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1928.525365] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1928.549899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:29 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x10000000) [ 1930.031526] net_ratelimit: 18 callbacks suppressed [ 1930.031533] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.041634] protocol 88fb is buggy, dev hsr_slave_1 [ 1930.046749] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.051905] protocol 88fb is buggy, dev hsr_slave_1 [ 1930.511526] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.516717] protocol 88fb is buggy, dev hsr_slave_1 [ 1930.751509] protocol 88fb is buggy, dev hsr_slave_0 [ 1930.756634] protocol 88fb is buggy, dev hsr_slave_1 18:20:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xff', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:31 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:31 executing program 2: syz_init_net_socket$llc(0x1a, 0x4, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:31 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x3f000000) 18:20:31 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1931.015734] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1931.044055] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1931.071261] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1931.092332] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1931.151528] protocol 88fb is buggy, dev hsr_slave_0 [ 1931.151534] protocol 88fb is buggy, dev hsr_slave_0 18:20:31 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x60000000) 18:20:31 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100), 0x0) 18:20:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlayk', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:31 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:31 executing program 1: prlimit64(0x0, 0x9ee0f0cac01811bd, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e001, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x5) sendfile(r1, r3, 0x0, 0x10000) 18:20:32 executing program 2: name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0800ec3fceba0080"], &(0x7f0000000100), 0x0) 18:20:32 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x65580000) 18:20:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xff', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1931.459292] audit: type=1804 audit(1574533232.128:7857): pid=19953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/617/file0/file0" dev="sda1" ino=16882 res=1 [ 1931.502311] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1931.524259] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:32 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x2b, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x9, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) write(r5, &(0x7f0000000340), 0x41395527) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000001440)=ANY=[@ANYRESOCT=r5, @ANYPTR64, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES64=r2, @ANYRESHEX], @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRESOCT=r4, @ANYRES16], &(0x7f0000000100), 0x1400) [ 1931.538714] audit: type=1800 audit(1574533232.128:7858): pid=19953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16882 res=0 [ 1931.568859] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:32 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x81000000) [ 1931.607593] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:32 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:32 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:32 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x88a8ffff) [ 1931.837621] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1931.847317] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1931.857093] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1931.878417] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1931.888839] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1931.912750] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:32 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1932.132090] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:32 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7ff, 0x0, &(0x7f0000000380), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:20:32 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x9effffff) [ 1932.197488] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1932.246418] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1932.268512] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1932.302343] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf0ffffff) [ 1932.372061] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1932.385594] FAT-fs (loop1): bogus number of reserved sectors [ 1932.400810] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1932.436847] audit: type=1804 audit(1574533233.108:7859): pid=20037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/618/file0/file0" dev="sda1" ino=16705 res=1 [ 1932.438523] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:33 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r2 = accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000000)='./file0\x00', r3, r4, 0x33375f1991296fb6) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="55ce47d103c1d2897738019c36"], &(0x7f0000000100), 0x0) 18:20:33 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, &(0x7f0000000380), 0x2100040, &(0x7f0000000580)={[{@part={'part', 0x3d, 0x80}}], [{@pcr={'pcr', 0x3d, 0x1b}}, {@audit='audit'}, {@obj_role={'obj_role', 0x3d, 'eth0%.wlan1#systemvboxnet0'}}, {@fscontext={'fscontext', 0x3d, 'Root'}}, {@appraise_type='appraise_type=imasig'}, {@func={'ukp\xe3', 0x3d, 'FIRMWARE_CHECK'}}]}) [ 1932.473536] audit: type=1800 audit(1574533233.108:7860): pid=20037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16705 res=0 [ 1932.515329] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:33 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:33 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xfcffffff) 18:20:33 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x9a) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1932.755323] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xffffa888) [ 1932.850331] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:33 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f00000001c0)={r2, &(0x7f0000000140)=""/2}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="080000000000000011fdb44b18e7b4d74d15d62968ab183e565812b6ef0bdef1bf8163948dcc3ae8872691119f83809361b0"], &(0x7f0000000100), 0x0) 18:20:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xfffff000) [ 1932.953122] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1933.054598] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1933.064374] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1933.085344] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xffffff7f) 18:20:33 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1933.213948] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1933.308008] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1933.436382] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1933.450457] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1933.467817] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1933.497446] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1933.522838] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1933.534211] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:34 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:34 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xffffff9e) 18:20:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:34 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:34 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xfffffff0) [ 1933.808626] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1933.840335] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1933.872144] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1933.903647] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:34 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x8) [ 1933.918524] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:34 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xfffffffc) [ 1933.976376] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:34 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="08babf03627e6c2b"], &(0x7f0000000100), 0x0) 18:20:34 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x40030000000000) 18:20:34 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x2, 0x0, [], {0x99f5ffaed7aed5df, @bt={0x7, 0x0, 0xdabb5c3b1c7b2fa8, 0x2, 0xdea, 0xffff, 0x0, 0x73, 0x1, 0x3, 0xfffffff8, 0x9, 0x3, 0xe441, 0x5906d4317e4a3587, 0x10}}}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000002880)) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f00000000c0)='./file1\x00', 0x1, 0xa, &(0x7f0000002740)=[{&(0x7f0000000140)="3d9bd7f36134867b7d2287", 0xb, 0xed4f}, {&(0x7f0000000280)="39df024f63a913f48e96cad7df8038579c393d6c14d8ff8acae3", 0x1a, 0xfffffffffffffffc}, {&(0x7f00000002c0)="5263e87a11a696072f6c55fc333ca4eab6b1616468f7707112edff7e223649da31f46cae36bc42b6c690b78187777e968bdf47d950142abc5519b17a190a51d5c10fc66a196e92641e84b438d62e0e519c62e344e77f02668be06c9f606f944b2ed7bf525e24a254a32b08eaf7705c92926d23bb587968a7e5bd36a57b6e947f2bc2c8bce3eb", 0x86, 0x200}, {&(0x7f0000000380)="3df56ab264e3c377d6f0c68706ea670b7ce76d75da218fee9d7f164de9e9f85e7a87020273de1eeaa9c810270678eab901989a6e56b96462f017ac02ff2b72c53c79a171194ae18db28eb81f46fa31cabe2d93f327876705c1f9ee4be25f7efb730bdc1f0ac58ab1a5328543d3e15e3c699b87a02e315b9618c0cbd1232e353879c2893ca06b2ab641466d62406fad558365ee142da5c37da1a5f274f8eb44a68e87da29de2b075a12d8de3e65b5854f41a2ef926bc235bc03c61386bbe63212398504d8cdba92b524180bc7eef985f2005f529812963cfe05496b4e6a38b4597dd3a681b97d", 0xe6, 0x7}, {&(0x7f0000000480)="a592aa317a58de90b715a7f16289c09823e899d97c8cee1fff481e45d9113710dfb7413e73c488e54d2cf9bcda31747c3a359ec4b939ea2445e9742624247060f4f93258225f3d121ba3a2b827167a9451d50b3d71e803715c", 0x59, 0x8}, {&(0x7f0000000500)="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", 0x1000, 0x2a2}, {&(0x7f0000001500)="e3e5adadc734e2b62f0aeaa20a0919dc7be14df06b97a85bc99218002e8954baa3f48465e8a57d2edc57ea0c771beeddc2ba2072bfef85998dc09139b3d29d0e1f6bd3718fc542b73f623130cefb35ea1eca795ca6eb3c099c9cc4eaa482ab0f78c2bf8eaa3337287e90039fdccde3f45eb2d4fe092716aff8089c39c1d7b2dcd8aa1bd1a9533d133afa6704831bde52b9a92493600362bddb247640d62bfc69187004ba415ab0638ec40a5397d432e5be260845987f4eae02c7cf2345d9a2844db04b91f4204ecf66200fd0808b74de817e61311b8cf78c969631c19d26564f4932cd8405a36b89e9a4f7e4e8e9708b32", 0xf1, 0xd5e6}, {&(0x7f0000001600)="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", 0x1000, 0x3}, {&(0x7f0000002600)="d71afee34d86832f6339d9cb7e5bf34bc24a36b404493bee5ed914f02ae2f42de230d402d85f2781d11377c11f2ab294edb0e35184de54a1b7c65d9d450742ebe8c8390ffd5a83b1e9dde0c5d50fa940d7f657aeff555704d83de13875089d931ab5ef39cf1a7da621431a55b9dd09ea0d10823b5b43be9a6d3b5a3dd1aa8fe3d9373f60994dac3a7ed7", 0x8a, 0x5ebb}, {&(0x7f00000026c0)="d9170b3c0d5a8f7920981ae3f5c03b22a0b672b12515733661a08aeddf40b1326cb236d0aaeeff667a2da9f3b00f524a378aefa74d73e5b75043fd08b6447a33a231906e", 0x44, 0x100}], 0x56010, &(0x7f0000002840)='ppp1\x00') 18:20:34 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1934.222839] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1934.318799] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1934.406773] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1934.417306] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1934.427075] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:35 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:35 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file1\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:35 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf0ffffffffffff) 18:20:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1934.480975] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:35 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x220, 0x40) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000000c0)={0x1000, 0x60000000, @value=0xffffffffffffff01}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000001c0)=""/188) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="00000061ac005096"], &(0x7f0000000100), 0x0) [ 1934.570290] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1934.608355] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:35 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x100000000000000) [ 1934.652699] audit: type=1804 audit(1574533235.328:7861): pid=20161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir715643470/syzkaller.iwdf6a/787/file0" dev="sda1" ino=16580 res=1 18:20:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:35 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1934.811491] audit: type=1804 audit(1574533235.328:7862): pid=20161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir715643470/syzkaller.iwdf6a/787/file0" dev="sda1" ino=16580 res=1 [ 1934.877602] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1934.937928] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:35 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x200000000000000) 18:20:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1935.164329] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1935.209996] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1935.231767] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1935.248084] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:35 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x300000000000000) [ 1935.258937] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1935.311522] net_ratelimit: 22 callbacks suppressed [ 1935.311531] protocol 88fb is buggy, dev hsr_slave_0 [ 1935.311554] protocol 88fb is buggy, dev hsr_slave_1 [ 1935.316569] protocol 88fb is buggy, dev hsr_slave_1 [ 1935.348347] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:36 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:36 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x400000000000000) 18:20:36 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1935.557182] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1935.646548] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1935.750791] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:36 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x600000000000000) 18:20:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1935.799956] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1935.861569] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1935.912550] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1935.932592] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1936.033582] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:36 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xa00000000000000) 18:20:36 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1936.271524] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.276702] protocol 88fb is buggy, dev hsr_slave_1 [ 1936.281958] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.287049] protocol 88fb is buggy, dev hsr_slave_1 [ 1936.314053] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1936.352511] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xc00000000000000) [ 1936.373576] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1936.397543] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1936.426409] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1936.454434] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:37 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:37 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xe00000000000000) [ 1936.703170] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1936.752090] protocol 88fb is buggy, dev hsr_slave_0 [ 1936.758117] protocol 88fb is buggy, dev hsr_slave_1 [ 1936.804317] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf00000000000000) [ 1936.928884] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1936.938419] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1936.948192] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1936.960112] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1936.991647] protocol 88fb is buggy, dev hsr_slave_0 18:20:37 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101001, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x10080) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) r3 = socket(0x15, 0x2, 0xfe) bind(r3, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xd6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000200)={0x4, 0x6, 0xfffff001, 0xfff}, &(0x7f0000000240)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x6}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r2, 0x10, &(0x7f00000003c0)={&(0x7f0000000080)=""/250, 0xfa, r5}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=""/29, 0x1d, r5}}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100), 0x1000) 18:20:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x1000000000000000) 18:20:37 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffffc49, 0x0, "44afd109b68a90ff8dfef184bce4bd057285346a73e2cb0ab7b66a7b6fe7b6ccbd7ef0fae0c743fad151bbc99e054aff18bc83e3e96dc385966773eef0d1d1cfba30593d3ec75b705bdfbcf1736f5691d4c533d05d3bdff69a6be70ba29896b02b15a6957deae7a0ad0a6724898347e6022a614ad9438ea4e8d520c9810dfd42fa950b7fd404667e"}, &(0x7f0000000100), 0x0) 18:20:37 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1937.162797] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1937.209964] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:37 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x2) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x8}, &(0x7f0000000100), 0x0) 18:20:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:38 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:38 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x3f00000000000000) [ 1937.357825] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:38 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x44) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @dev={[], 0x1a}}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1937.410025] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1937.452090] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1937.472844] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1937.497659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1937.518033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:38 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x6000000000000000) 18:20:38 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:38 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4202, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)={0xdc, 0x0, "7c256778a490319862f526be23b09e7be22b3032a0a48d9cc79d27e3ea8a529e1a38e1a93ba173a8038e56e3a5a526830969df32dbb294bced7775099ab088954237d5cd0ef43b814c1ff5a3fef1a903d154fc2e6aef61a94566a37e03d63cb4eae5f4fa27061767822019635291d2fbd6500d340554a6e615d64f26bf641e3142c5aebd760527156cf4eec603be462745765016980500319f6e36d4c5f5ef1cb238989bfc3bca4d20bd1e110ae3a100a22beebc9815a31167d8cb0ab86c59e56e4fa55e4bb86eea15a88657c63fc34e72207776"}, &(0x7f0000000140), 0x400) 18:20:38 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x6558000000000000) [ 1937.772876] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1937.870753] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:38 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x401) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000140)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1937.933103] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1937.984950] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1937.997626] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1938.018744] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:38 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x8100000000000000) 18:20:38 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0800000000000000366737b98b6b093df1023895bd44ab3f91e125f2619aad5106385ef8a803279acff196998a3584a38fbe403b327d6ac25004d1ba7511e374575f1ecf0346cb"], &(0x7f0000000100), 0x0) [ 1938.192016] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1938.226666] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:38 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:38 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:39 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100), 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0xffffffffffffffea, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x1) 18:20:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:39 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x88a8ffff00000000) 18:20:39 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0xcb}, &(0x7f0000000100), 0x0) [ 1938.430492] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1938.474768] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1938.491946] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1938.503792] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:39 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x9effffff00000000) [ 1938.551393] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:39 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) syz_read_part_table(0x1000, 0x7, &(0x7f0000000600)=[{&(0x7f00000001c0)="58805e699164fb70d56396d244508b8f6e10ea27f78d118a2e28e55c234873f7ba434921354aaaf61f4123252b12c54efae6bbcda14958ed5b18c9d28f00bdc78e38e1c249866db06ca2a3c3421431c22c65f836d4be22e73ce0ac1be174f9582d70f904faaad05a39efd07b62694989b6ab113eed94363654eff8b2ce55be18fb8588c437d39ad5efed9702bc078379e6dd30349b0072691e468358e5dfb3375fa43273755c1e9bd1cf0de0a5af71f0ed", 0xb1, 0x3}, {&(0x7f0000000000)="a718ce893f966754055b3822b2849d703a7cdfdef91776ef470c9538ca16b558c4bd6c0a0365687ed1b94173", 0x2c, 0x80000000}, {&(0x7f00000000c0)="a6a5328aac4bd936e32c8e8e3d", 0xd, 0xffffffff}, {&(0x7f0000000280)="faf89ac84977ddc4b0eb61c5b12014216f67293c3ae7d28f8f66dd14376cd007947935cd58583258378ddc90f165b004f4e43775bdbd48590d61be53ba515d95dab359caf980ec46777f0e5130ac93bc593c34cfa0d732fddd714f8db0855f50543b5492dbf908c965476688ef594202110dc1487c6b57cbd212cc32f82b852e0a1a12b35e2fbcf7d048c1fe02cb06377eae1daee4130610e5adbfab271f92a016d9a5f444609d64d96f9cc1d619352db0b9c1f6ac34d8d51fe0f8ea8f19f02e17926d1aeba1b71fc9fee1e5c38aeb209a9a61c841659c925d7e480210fd98fdad360fb370a5ecb82f2adf57aab9", 0xee, 0x80000000}, {&(0x7f0000000380)="de187971cdea2be9728a0905a13a3b4dfa8651164e1daf31d952b54f019d245d14dc7d23869fdd522f5a1adf8b4293ad4a6b6cbc3bbfbc4e5b5f85272bd4ad0e33a56369f87f4484d290e254d056f1a75665e6fb32ba7c42ec98c2e6243248b2aba18c5cbfa9b10afc4ebe37a4a5046d", 0x70, 0x6}, {&(0x7f0000000400)="6f8647e24ddfc104de65ecaebb5d4233a364375bb8b868be8e7df6e4d81a2cdee753d05373ff0e76f98f86d105898d3aadc880041cce1b86b6c952fadf81d88d18c974d5fc8c31250db8454d68f4ef46123a275a891c309b045437882a82a03a2b2f1bacc9a36edb9a69ee1fbcf9e04812af576e3437b72efc9e4e6501c1e8ed2dcd99aea979d1b729449e0fde17b74feb2f128a955fa658995183c7eb62bbd1ccbea9dbb23249530ad7391db96b5379e8538cd753c03b1a033b0ef4f313ceac72", 0xc1, 0x4}, {&(0x7f0000000500)="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", 0xfffffeb6, 0xfffffffffffffff8}]) [ 1938.643844] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:39 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xf0ffffff00000000) 18:20:39 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1938.903703] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:39 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xfcffffff00000000) [ 1939.036475] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:39 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1939.189551] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1939.249179] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:40 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xffffff7f00000000) [ 1939.295467] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1939.330265] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1939.371202] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1939.440598] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:40 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xffffffff00000000) 18:20:40 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:40 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1939.756455] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:40 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0xfffffffffffff000) 18:20:40 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r2 = accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x80000000, 0x4}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0800000001f8ffff"], &(0x7f0000000100), 0x0) [ 1939.881874] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1939.914157] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:40 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1939.937426] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1939.973671] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:40 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="2d0d013d85fa7b59f52b9165a6a1233c6e9891ea554b3bebc21be4f7b808397427999d0876e1f382784dfecc5c18b1cd9e89c0b9"], 0x20}}, 0x0) [ 1940.020649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1940.103651] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:40 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:40 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:40 executing program 3: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400500) socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="0c00eb269792c04a10d800"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1940.216473] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:41 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r2 = accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) fstat(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000240), &(0x7f0000000280)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f00000003c0)=0xe8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r13) r14 = geteuid() r15 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r15, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r16) r17 = getgid() stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r19, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r20) getgroups(0x5, &(0x7f0000000540)=[r20, 0xee00, 0x0, 0xee01, 0xee00]) r22 = getgid() r23 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02003c76", @ANYRES32=0xee01, @ANYBLOB="02000100", @ANYRES32=r6, @ANYBLOB="02000300", @ANYRES32=r8, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="02000100", @ANYRES32=r13, @ANYBLOB="02000400", @ANYRES32=r14, @ANYBLOB="040001000000000008000200", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="08000100", @ANYRES32=r18, @ANYBLOB="08000200027684e50c14632d6e9b3fac47e91f1db817bc66b68e822cf020b00b56b72014714e874d734456d428d5599655eea228ee63e77034a85fc58d79324e4a8e0e5fe967ee38116593c37dc138c4d8eb5557b2b3021539912e08e0c0b0a23f52d15bbabc6927fb78b0d5191319ad1efc2260f1e766751212ca9597648fa99687376cbf8e62b9d7543b3c0629", @ANYRES32=r21, @ANYBLOB="28000100", @ANYRES32=r22, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="10000700000000002000070000000000"], 0xa4, 0x7608b77ea844abbb) [ 1940.305910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37527 sclass=netlink_route_socket pig=20444 comm=syz-executor.3 18:20:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1940.373937] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1940.433779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37527 sclass=netlink_route_socket pig=20451 comm=syz-executor.3 [ 1940.446710] net_ratelimit: 17 callbacks suppressed [ 1940.446719] protocol 88fb is buggy, dev hsr_slave_0 [ 1940.446783] protocol 88fb is buggy, dev hsr_slave_1 [ 1940.446882] protocol 88fb is buggy, dev hsr_slave_0 [ 1940.446933] protocol 88fb is buggy, dev hsr_slave_1 [ 1940.483491] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1940.565837] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1940.605527] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1940.650929] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1940.657876] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:41 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:41 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000240)={0xb, 0x8001, 0x4, 0x6800, r6}) 18:20:41 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1940.911511] protocol 88fb is buggy, dev hsr_slave_0 [ 1940.916664] protocol 88fb is buggy, dev hsr_slave_1 [ 1940.981160] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1941.076210] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1941.108840] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1941.121771] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1941.150902] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1941.152112] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.165794] protocol 88fb is buggy, dev hsr_slave_1 18:20:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:41 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000e9"], &(0x7f0000000100), 0x0) [ 1941.239936] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:42 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYRES64=r0, @ANYRES64, @ANYRES16=r2, @ANYRESHEX=r3]], &(0x7f0000000100), 0x0) 18:20:42 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1941.421806] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1941.475034] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1941.551517] protocol 88fb is buggy, dev hsr_slave_0 [ 1941.552741] protocol 88fb is buggy, dev hsr_slave_0 18:20:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1941.719941] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1941.731617] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1941.749786] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1941.759867] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:42 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1941.806802] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1941.824774] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xff', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:42 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:42 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:42 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000000)={0x10001, "84ac02bd8e484e1d91541d518af646d90faf8cf269a8f5f4b1514ff8e81ea5c4", 0x200, 0x7, 0x3, 0x1, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xfffffffffffffeab, 0x11, 0x40d, 0x4000, 0x0, {0x0, 0x0, 0x0, r2, 0x400}}, 0x20}}, 0x0) 18:20:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1942.317925] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1942.333021] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:43 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{}, {}], 0xa, "7960c68fc716512e2621f145a83159ba5148b807ee45da804d7881"}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1942.406482] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1942.441597] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1942.471178] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:43 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='\x00'}, 0x10) r2 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x0, 0x0) r4 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r5 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r5, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r6 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r6, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r7 = gettid() tkill(r7, 0x1000000000013) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000540)={0x0, 0x0}) r11 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r11, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r11, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000680)=0xe8) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) fstat(r13, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = open$dir(&(0x7f0000000740)='./file0\x00', 0x400042, 0x100) r16 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r16, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r17 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r17, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r18 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r18, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r18, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r19 = gettid() tkill(r19, 0x1000000000013) r20 = getpgid(r19) r21 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r22) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r25 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r25, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r25, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r26 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r27 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r27, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r27, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r28 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r28, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r28, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r29 = signalfd4(0xffffffffffffffff, &(0x7f0000000880)={0xebc}, 0x8, 0xc00) r30 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r30, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r31 = accept4(r30, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r31, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r32, 0x407, 0x0) write(r32, &(0x7f0000000340), 0x41395527) r33 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) r34 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r34, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r35 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000900)='/dev/sequencer2\x00', 0x82c00, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r36, 0x407, 0x0) write(r36, &(0x7f0000000340), 0x41395527) r37 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r37, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r38 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r38, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r38, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) r40 = open(0x0, 0x141042, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r40, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r41, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r42 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r42, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r43 = accept4(r42, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r43, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) r44 = syz_open_dev$dmmidi(&(0x7f0000000980)='/dev/dmmidi#\x00', 0x0, 0x200) sendmsg$unix(r2, &(0x7f0000000b40)={&(0x7f00000001c0)=@file={0xf31f3e0a44dd4e3, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="2d85e05917722de90314be331b062152bf4e8ae6d9016f187fd3cca9416a4516fe33675cd8b79c4c094b4ad5b6138595cbca4a4321247ca99ca62fdc4eba1ca5d861d33ee75c1f4d76778b9a", 0x4c}, {&(0x7f0000000140)="630bd006", 0x4}, {&(0x7f00000002c0)="ce5fdfbd1dac5bc37492f8114a768555340ffa005e6597b2f16a7da018c8a07c2ded641bbafde1eaca17d252e70124e2207bdb4523125359df0d54531439790d8dd6a678d4aca445d269e5a9ba88a394b6bfd7ce26521cfe0c0593012729077f9eaa", 0x62}], 0x3, &(0x7f00000009c0)=[@rights={{0x30, 0x1, 0x1, [r1, r1, r3, r4, r1, r5, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r14}}}, @rights={{0x2c, 0x1, 0x1, [r15, r16, r1, r0, r0, r17, r18]}}, @cred={{0x1c, 0x1, 0x2, {r20, r22, r23}}}, @rights={{0x28, 0x1, 0x1, [r24, r0, r0, r25, r1, r26]}}, @rights={{0x34, 0x1, 0x1, [r27, r1, r28, r1, r29, r31, r32, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r33, r34, r35, r36, r37]}}, @rights={{0x34, 0x1, 0x1, [r38, r39, r40, r1, r1, r41, r43, r44, r1]}}], 0x180, 0x1}, 0x800) [ 1942.521685] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:43 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:43 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000000)={0x1, 0x4000}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r2, 0x0, r3}) r4 = open(&(0x7f0000000200)='./file0\x00', 0xfd729ce31c7d59ec, 0x1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000240)={@broadcast, @dev}, &(0x7f0000000280)=0xc) fchdir(r4) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r5, r6, 0x0, 0x10000) [ 1942.709812] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1942.758236] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:43 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:43 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x8, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$VT_ACTIVATE(r1, 0x5606, 0x101) fchdir(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:20:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1942.960523] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1943.023980] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1943.078265] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1943.102243] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1943.105143] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1943.127653] audit: type=1804 audit(1574533243.798:7863): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/620/file0/file0" dev="sda1" ino=16629 res=1 [ 1943.170624] audit: type=1800 audit(1574533243.828:7864): pid=20575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16629 res=0 [ 1943.186357] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xff', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:43 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4000, 0x10) fchdir(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000003c0)={r7, @in6={{0xa, 0x4e20, 0x1f, @loopback, 0x1ff}}, [0x5, 0x1000, 0x8000, 0x6, 0x78, 0x884, 0x9, 0x4d3f, 0x9, 0x1, 0x0, 0x4, 0x7, 0x7f, 0x7fff]}, &(0x7f00000000c0)=0x100) sendfile(r2, r3, 0x0, 0x10000) 18:20:44 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:44 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x40000}}, 0x20}}, 0x4000) 18:20:44 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1943.675811] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1943.721013] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1943.748994] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1943.771294] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:46 executing program 2: ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x10d000, 0x10f005, 0xf, 0x0, 0x5, 0x7, 0x23, 0x81, 0x1f, 0x1f, 0xfd}, {0x4000, 0x6000, 0x16, 0xff, 0x64, 0x0, 0xa, 0x8, 0x5, 0x0, 0x1f, 0xa7}, {0x100004, 0x2000, 0xa, 0x5, 0x7, 0x1, 0x1, 0x9, 0x2, 0x4, 0xe6, 0x4}, {0x4, 0x0, 0x4, 0x4, 0xff, 0x40, 0x7, 0x6, 0x1, 0x0, 0x6, 0xa}, {0x5000, 0x2000, 0xc, 0x1, 0x7, 0x1, 0x20, 0x87, 0xb5, 0x20, 0x5, 0x20}, {0x4, 0xd000, 0x1f, 0x2, 0x4, 0x8, 0x20, 0x7f, 0x7f, 0x1, 0x0, 0x80}, {0x5000, 0x3000, 0x8, 0x1, 0x4, 0x9, 0x0, 0x5, 0x7, 0xff, 0x9, 0x5}, {0x100000, 0x100000, 0x0, 0x0, 0x33, 0x5, 0x4, 0x3, 0x0, 0x1, 0x8, 0xe3}, {0x1}, {0xd000, 0x5d77eacb5958b082}, 0x8, 0x0, 0x104000, 0x400000, 0x2, 0x5000, 0x100000, [0x1, 0x3, 0x80, 0xcde]}) creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:46 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xff', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:46 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x2, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0xffff, 0x3, &(0x7f0000000200)=[{&(0x7f0000000180)="abb3072ff4e50de5324dae7af0418deb68f6c14f1a575a618b370435aafa8a14ddae826f177d8dc223381376bbd7a1812c997dc835ae5e291fa599f3d285c9188aa7c579c83c87974a19aa08f7c2936d457466b892e44bec0c9a6ceb7cb147b462fa6d9d79b01b4f64547b1d30e3c3", 0x6f, 0x2}, {&(0x7f00000002c0)="89dff88604347414ea4b0d0ad35cca62c6999c71ee4d353d6d81f2932f3233cf649a69719a78453b3d74f81e9643503fe269a6f6a1c199d98b08211c55d48e57994feaa788237ed0182a93cf0a03788a632e776eaa95ebec1eb181744f931fd23b67f6363d8cdec69173feb25eb3e6be508919acc5b57353edec9ee793a810489b214b4af0136d7f58449b4a87e3935440b2b2d3257f3a58f0f48a2d304ac267de9e8dd04aafb775297757de46285161bcb5986b51d5acaa0c28716a19ed3b1e7f23a0bf", 0xc4, 0xfffffffffffff4e8}, {&(0x7f0000000540)="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", 0x1000, 0x4}], 0x2000, &(0x7f0000001540)={[{@clear_cache='clear_cache'}, {@acl='acl'}, {@compress='compress'}, {@acl='acl'}, {@space_cache='space_cache'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x33, 0x62, 0xc2, 0x65, 0x33, 0x65, 0x39], 0x2d, [0xf2, 0x64, 0x33, 0x56], 0x2d, [0x389b705c7e5496fb, 0x62, 0x0, 0x64], 0x2d, [0xd, 0x35, 0x62, 0xc], 0x2d, [0x64, 0x64, 0x36, 0x38, 0x42, 0x2dd98f231b8653fc, 0x34, 0x39]}}}, {@seclabel='seclabel'}, {@euid_gt={'euid>', r1}}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:20:46 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) creat(&(0x7f0000000040)='./file0\x00', 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x7, 0x72}, 0xc) 18:20:46 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:46 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1945.696524] audit: type=1804 audit(1574533246.368:7865): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/622/file0/file0" dev="sda1" ino=17025 res=1 [ 1945.711537] net_ratelimit: 22 callbacks suppressed [ 1945.711546] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.724276] protocol 88fb is buggy, dev hsr_slave_0 [ 1945.729233] protocol 88fb is buggy, dev hsr_slave_1 [ 1945.734260] protocol 88fb is buggy, dev hsr_slave_1 18:20:46 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:46 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:46 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x10900, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x42}, {r3, 0x8180}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={0x5}, 0x8) 18:20:46 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$char_usb(r1, &(0x7f0000000540)="74d9df97a21121a8c83e1ab8b2ac74404c816684c01271028ffd429ddbf60d347d85e55931cad0a9b0a5ff147965522af6df52a3558e3efbc9467d19786be90ab233ab775829dfc2a5745679fc9a0c63b9e02e2fad55baa07525e6035595ee075d5c65cf524b6ae52cb3a79dd29e3c5a4c58e54d4992aeca84ec31fc33ecd6177fce3dea2b6e53954ba29657ddf7", 0x8e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r7 = accept4(r6, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = socket(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r9, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r11}}], 0x20}], 0x1, 0x0) sendmsg$inet_sctp(r8, &(0x7f0000001a40)={&(0x7f0000000240)=@in={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000340)="1c594ecaf88a178f6fa70bf29b56242e351772ac83f0d9f412de69dd7e0e306110292fa0d17b13ee5004a71430d966d8168aa5bc917522bde43382fb92a62c30ac75780f1665431c61bb3bd6", 0x4c}, {&(0x7f0000000600)="144bec729b04ed3dcd335d912efa0876f45fd8e31a444f15d0e007b09ebe260ac4f6bce9dcdfb5f281303cced84c95b436069c453af80a2558a405f121234e6701c1d57c2aa1267dbebf85b465a9df0e708c8d517e49a1ea93aed8cf09e9440473e30814a3a66a2cb6a1b6b1a71b76f88b6c1ea0925241d61ab508c359b05907125139058d960a8ff875d0995f1697d3fbe74c4348e78844debc04e1c89b72f5649731aea364d144beda17b81a08086394467d535054225917e57336a3296b4d7bf6d01f82ee3d3db47e3c0b6aa12080cada109856a0f06a582fb61a7c4423f2e000e84b597914523531933bd6d35f09f95ef7f6", 0xf4}, {&(0x7f0000000700)="e39791f0a25c018c28ed9fddec4aa321f435d7aea6f6d87627657865295b8d45613c862d12abdc5a0374f9340b1a32ecf4062e86558c702454b4d07bb4864a62b037cb0e3c04746a4e35bd7ee389e4908d333abc2d6f518ef8324b92b22a6915de6cb09fb8d6b96c3ea37429daa160e4e71bb2a296a07728", 0x78}, {&(0x7f0000000780)="b767fdd145c3ead4ba482122a908dd32f310183adc5c9950b279f7ba296e5f4570bf9aa71ec22a2f7339506d9fb5641927f013d531e499397bdc652aefd29f23618228c2733306d7b47dbc11f6561a85a93acbd8251d9adac066aee1c023c38573cd53843911fb650d244bf0b5da98a001bc11367b900df77e3f5aacca023159cd7b8b29a5c9f9d38105a31fbad8fd738d9060d5e243224fc376b9c751d94446eea7e5d4bbb063dce3a1424dfda55d7ceb11ad4b6639731bf00a91ba0cbc149e28d5dc9645db450ad59b8665d7fd6a3f763745fc6c1f946b4d09ceaaa09bfaab358dfaee28adefee7593763446a3431fbe2db617a7e211ca42ceb3de30619d7b58441ff075b5c722624155c781ec989cc49447b3c4c6f426a39395b7d6df0f7a782d08225f34009f41d39d46222b2f34c29b60c124dc81afe4d8e32f7c1041f16aa63ab4c0c492720885c5aa2f62b5a737052893ef29d5bc885c99330a82c339253c8d0cae3fd2a39e191607e8d374fd8a00635d133287ccff6c3be2c3b1c2e4e34aa49a7b5a4d12d946dacca12e9a620771df5c6e64a4108b9b0dac824e1f7ac6dee4832ffa29958667a02514cdcf1465709622126f2fa0e84e4262cdc7806d1542b19db6bf692a356c4fb5adedbcfce9824ef1e87b0dd845ac6ee56fd15c62356471bee003b1850da90a5bd28d3ad7987f301be25d859d956b6bed5bac1ca84919bafc78e4693fddeeaa0de2a45ad28773760ce57be34e78efb27a1b36bd13514bdeaa63fc920262a707ff050c9c8d5d011299b0926ebdccb0252b3e5577c1e6ec04769f918d2167ba92506d1f846bcc0b061e9bdb773509a9fcee4b0e3e6d0f35d76d57d9fd8f04aa7e423be7b5b6493d776969488f841d96d440764718e5bc25a8821f3d62fb054fdadb9728caead5f620d57e1493c9ee3f71c99f4052fbe53033538f743b598e48ad04029dd3c9b591b609a0c9d4e9fc34486148d85242e2b8f5cf340dd43dc5333ef83d6667822927792c2ec4b7e8698f1819b8de468a7874acf3bbe24e8edee9cb29bd6c44e9f2963a5302025374fcc7715c3416d4297f7d54ebcc4639683ed7b86892b92808baf6652136ebff59496ea8b7c9f64283a76309bce82a85b8eafe558a778675334a97484bc9f867df0c3151a89affb8d21a58ef3a479f81e45043e46bcf817435ee9c03ac59b15cd0f01a99c3b10a9addafecfc7bd363feda775e707ddbe3ab030257e99b344b00a0229a6155224b612de45260d79e69e7d158badcf66ca57bda801ce6cc5fa1ed46d4e87e56ebd91a35900fabe09a11879c4eb4e9a02c55e88a010ec3237c6430c4b6277bb787c6d7f905439e6549736c7303133b3134bdd5dd4345160802bcdad3a9001502a9ff4a4acccec1f5877bd6902e445cba4752414efb58d11a585ff2da2aec954e77dde70bc8d71a694d2b98d9db9cec8529042b3a9a15a0665bfbe721b6803a863013263e4b6c941be1a01535c6992356a486f32c05f655f238f503cb6458e3c45bd3e8ab97bc55284e7b7e7589178c2336d5d750524b73d297cc3c164fbc304017eb2abe4ea9997c90c2f139be9a287b670cdc215026f8e2f7b7b276c929d98cb398f7fd4fe1014c98c64e62472a996661bed9bf2ef6eb106a0d27b4817de61a4be36762c78593865eecc355006638eb767044e641972e47bc114691454aa335af6bc2f7bfd97b1bfd7af4356e356ab79f3c7c20367dad07add9f88909d853b2784ca29102ebc8364664b7df2283dcac2b73e92041eda33f091a45c5cfa00efcfa9a4e267e2fab618f93b98122d7f098eb4ba69d9c7ee0bb322215940e24fd345e7c470df38fe5d5742f38ac54f57877ec97955065c599c2df98887fc5deb2db35eb106ca1b2e910d48784e2b52f82a1319fbddb42d20f572ba2ef7a3dfb74c1390bfe57cea6374019d1357bed0825c3f940f4e4b4b3cbcf67901c3ba76752f272aa9084855ae3e00d7d6f9c741eb3501329cc4294982ccb45ffa65b9399d334661991f4171e3133b0ebf177f766e9b59cc01856ffca31ec38babdb370992aeaf6114df3d23d1202aabaebbef0b6c87e185b6fc54ea874b066fd1b17cfcf8a8c020069607397544b7194aa5044e6cec057f42723aee9b827d733aa8bc7a1dac78545a87a2fecce3d5091b69379b8413a51e2244f34425228c6c0576fa89d8e785ec344ace03be32a2e9f9618a74a5531f233598a520997e7914e03e2ad69f8217637e2621e27ba203eb529b7c32199fa2d76390cc472cc4270c761afce4b7ef97e19ab85b25c3b5d83c37ccb1729819ec56545996c6e0d923c00f3ecfb278e55d6207f3f5049cfac6f7dc5e2d4cabdf77865d6967ada4d1bd61048d4f558e30f24fcd564feeac07b46c375307320bc09093d6ae33f8bf1c8ffed01403328a701a1c67e67009846c2af29f37b4e981591f7d3329e19cb200ab95d31b4e7c9427c171058bea650f50d77b55f63426936ec4bdbc098575ea8be5898482bce2a001aa3bf56eea9416f16149b88abf2008d5037c92be9115d338a4e9722fcde1dedf0a614dae328b05d50a3bbf5c6a513552eb4dbe47b298d43910327299ff1fbfcce7e94c55c761b3fdd4c492e26668916239560572350c166c43a837bf857d11d93947c9db83b70d45cd529488486bfe3694524b6470493176d8098588aef145edf1a0c723828524482c274ac47e2739e7bec6c71e404ea0bae45f7fc8ac187a6f3e289d1774864ea21a25bf3fd0477fa14afe2d717360e41ec1d363eb32ce7e1f6150894388976cb0a9a3568ef4958eba04195ab331bcb67ae52cb649ae3a08b873c8757b8f8fdac2d8729faa6d39b1a56a5e352ed56d21b3b0d1e11f3fc159d9d06dccfd8b7889158aa49104092b8df9cdbbc1655b9db2ea7d1d14ef8441cea846185bdfe27245fde45395512b2a69b064c15d9298c9d61c44dbed2c595309f572f1e3b57127dd9b425ad786d85c0bb53c2a6b873452f421710f6d5f5c841519c683eda87101effb755f116f5b1990c6e76b8cbd2fb8e999a1c2d99f1221537422d89d19783e8bd460d16b100d4454650137497c542bf3ad5d0c6575ab1da9515b3cfcf8f0cbe0a49646eaebfac5a81d46a1b9696ea15a65be9040ac1498271792d5a688a73716cc5af9a0155dcad85a65b5aa101a79709070a8d226316d7aec2c1c0d4fc7cea78d72b17ae3965a19804ec121dd2934618833ecffdf0feb6ab3e527a4750d7174d62fe824f8414b91fa7db70bf0f64a8519145ab8a436839b980635a2316ee009dddd1c44d9c9159aee1579423d7c9472e193c76ee3cdcf522b217a4d37f7982aad97aad22142fcc1cea33efb792b6ba3c314d6ed9469786da5f13199561b5b44657b299a1c7f6559189669428ebe543a84d4e78eef5129f8ab283519cf48359df3c5512f33f047743ec1d1104fa24c679c06d36b6a2fbd013c5e5d8d00ee0829d861ffeecbde3c8fd2b750bf31f51728244cddf670691c9ee165007d4d206be717b84318991802cecb69ee4a26c1e8adfec5d0724f1693b8ca0b3cd93ca54ec19cc7cb7d404d7b5539a2f32a5d9e68899bdcf28a26fc00c947a8dbe8a66367e67bbde31cd0167f9cb5a2129917d5e19036b983c357b6bf5b034b070a949862fb3ebc7ae9bd39c53dafa160f8e3fe156aff0a9355f303d1ce1ea69af4d1cd47674b542361dc2d8f64bc89669922a5295bdb8f78ba11f2acd6923c703c86e1a4812e67b5dae6cfe7623b61b296f4f3ce45c17290191e6e4e0d9f30e23934f0f4522ee87a38ba19bada6d6c85c7a2992e41d2cfb28d8896fa3cf720a59681678fd7b9f6ee5a33c62b724d66c9e4c153d2399ae7cf4f4b4fe356466694f92033e5129d836e4d4189f9d3864cf1cdacf60a0598da81e22aba6b86f19406f7b2554dbd0ec030e08f836b08c9f144a92d5898ec1ea92d41286de6dcb066affc2b198f0d2fd2c7ee74eca41e1fe962454757bdcd950bfe9f21683d972f9b489b405efcadeb3059a911228f19c0b8f527151e18f37bd78e911b2ab4b169bbbeb0b0b295a2dda08576ec5d1d520cefd8781e062edf9b3853f261c7983359e43deb96942a0f8bc3a470fb5d84a74459386122c166cda589206a116a5b7f786103f3f5d4fd9c12ddc769d224093c2318832fb5d973e5e5e6576e06797be60bd7b9cdcf4ab3dbd98da1d3c07558b8e0362c2ec1ed0b52fc80d472c3ac33d1637f001ff01ca837a4c471ebceb0a90becafb913b7847e79e785124d9e6b72950bbb66c115d283fdcaea09b5d2723eaa48d2a44699fecce9c3d22bab103c94a767278e45873572714e1e97f92f54edc9840115d1e13241b359fdc93857918b95831066af65b34ed585e82487a73436f9010dd57f5d290ceb73bbb2a8bfb4eb59150d9221cc53dfa5bb4754dede967ffe646ce61c4f293c217fd03aac72fd26550ae8c88edb85ecaa8d8e453418e1544de56c8d55c1782450b90f870c27bab887e25b53dd0985cc957a1062dda3e6a7fb20e969e7e21b4feca6a633ba6db3f217d2be1d64ed0d30cf3a0958239b95ee386f7260dc62e8a68f5b5237b3c67d4bfaf55062a300767e39cab25bcb32ab1e6f331615f503be5269aa34dd904a0cce384cdee8ee14abd6ad5261bdcc674945e0018183095a441466cd8d67824cccbf25dafe7935be19d676d0a23c5f713bbed21e210c4f99696f1d691d5de34912bb3420290a4605d644ef46c84b1ab2516511e274ee03a57fb8d7b017ca5f4212bb389d07f597d4aad60baba4ac322c2acda55a59b6cf8a654ffe5ed8987d4cc563306504590135de366c0437cebf89270b364e6d2e1fd6995381b67c1d76ac468873e93df7cda4be260f8112a8a83eb6c48940e77278eb1289487d08a18df8689811b6ef9a2aaa87be1d9d2c1d20178b15fef7bb363b6b1bdccbf78e0bb9eb23d9381c9d5df7608ce822430fc333115b1490443dc18574773413c2eb2c6d259e2a96d0470a1bda015a754771aebfc45348e150dffeaeb78881bc83b9dfc445d33f41b7bb4f42540e2ffdf46f5137f7a5859f5c071d3b22c97cd2f7b524fffba51d12511e40fc6c419113e1eaf91c93e21e97d3e94cb1ca84403c645915d97634e660dd4935f3d6397d83b1b9ddacc170ccf41b415e9f869194a9edc75fbc6ec0d234dcd89f4df50cd68e0cf6d1b7d23a8ef7418ad64a4387819069dd60164114bc9e46a51c93d3156ed969db03c4aae34f8981cead54e6a19999cb43bb686d1a0fd986d3093edccac8449fd1d780247866fc7ead0bd943d6b93dfdc7c8901d3de010d7c03a01b157c65a5a3cc214ab3f71bea499e31f7f94eda121da1beafdc9d306eb980adb1b310cae2435c8c043dd995b703a2efc2719edf11b7b2c1c73b66b2baf6e34ebabe847cbc5dbdd6b5a240b9ec41887a22afa8d7b502c2327b543a07affceba1da190f33785537067ab1a144038671354babeab4b58cf7b4329522a6b76ccc7516d912192ae22157d22bc14e7f250428037fa903b01293c2a7970a697e284770cb96d18654c1a26c0f82d92e065d91838a7642a3f9b5ada1aca8d6ebf105bc0ec109866c858a4e82267b6269f0324a8b2038bed1ee1343a55e7661bdc81775681ffccbd354e6775e7933acf6a333da293941cb9272d285f144587b8cbf0c7ae31a78a42bd75bc7751b728642e7e05d0009b04d97cd677a36e6b23b35afc9c5797cda5947eb3da825aa1b24313ee6e10f5fd948989a6d5b3c138dbef504b0a64d973e", 0x1000}, {&(0x7f0000001780)="d38ab439789b562d6d599a00778b43f59c195c88f335c183c121ff83f131cd08b136f3472c9e3e4a8b1442e84d5a4b612a1b0a605c5a0e4874272fd561533f2bcf78f4f9662437b4b756b7ee9ff5da55c8df65b40520dcca33192969e57e884aa626133cfff1ff2af0fbfa9c62630002a711a1276054ff40ea6d5747a48880c1a94777dfce92542985d0d9b6050d4db116e8e6e575e26f3d849287eeb711faec8ced0fbc6a46a271de006ed138466ab0c9e2", 0xb2}, {&(0x7f0000001840)="56fac32c28ba7907aaab61dfee0315ec48efa46d701e1c9391aac8ad5c2c86663b6bac39a99a32609ee4357ea3c5e41aabd3519a9f14e49673f6fb26f42ef64a19bd9f6f7acedb0c5e9196b8e65d8399fc86dfd46e3b8a02d233542e5d8b87177aa8d2300e74af7cdd30e7c1be6410800e1f0a22f319f9d2cb44eaaa70e5d0e55c0df8cb39c6", 0x86}, {&(0x7f0000001900)="3d8fbeb71f4739f21212eb64eaa1744165f7de903f306018", 0x18}], 0x7, &(0x7f00000019c0)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @broadcast}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x8000, 0x200, 0x7e2, 0x4, 0x5, 0xffff, 0x3f, r11}}], 0x50, 0x40}, 0x400c0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r12, 0x407, 0x0) write(r12, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRESHEX=r0], @ANYBLOB="f7d6ef1f4a5188158a86079d37acf70517d7803b0806c6b69c0f8eb024fca2e0e91f8fe21a9c1b464268e6f53db3396e8226cf52b03268ed196cd5a23acd15a7422cc1082649a5fdd7de3c81e37c2a5ce659806dd844cddcb72234e81a9f3a5081444b8847bdd687d0a87b46340da82ef65a0367f4a9e7091e7f97bc11025e56c2f0617138efbb8e5f854547125329e167577746e2686f9ee19369ebddacefecea5b747ea5c22c1f951dfa37c1fac536fd94bf9c5bdd40", @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES16=r12, @ANYRES16, @ANYRES16], 0x9}}, 0x4b50389b816dcb7b) [ 1945.905275] audit: type=1800 audit(1574533246.438:7866): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17025 res=0 [ 1945.966329] audit: type=1804 audit(1574533246.438:7867): pid=20628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/622/file0/file0" dev="sda1" ino=17025 res=1 18:20:46 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000000c0)=0x7) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8, 0x8001}, &(0x7f0000000100), 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)) [ 1945.993977] audit: type=1804 audit(1574533246.478:7868): pid=20628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/622/file0/file0" dev="sda1" ino=17025 res=1 [ 1946.003026] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1946.060292] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1946.088849] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1946.106285] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:46 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1946.132610] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1946.148017] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1946.204314] audit: type=1804 audit(1574533246.878:7869): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/623/file0/file0" dev="loop1" ino=511 res=1 [ 1946.249200] audit: type=1800 audit(1574533246.878:7870): pid=20663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=511 res=0 18:20:47 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2000}}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000300)={@ipv4={[], [], @rand_addr=0x2}, 0xf, r7}) sendto(r0, &(0x7f0000000040)="cec52b371b88d4c0ef9b76e63776ca2e373fc43d8978c88bd088b0b939a4d8000e9bef30601f2840bbf184", 0x2b, 0x20004cc0, &(0x7f0000000140)=@ll={0x11, 0xf5, r4, 0x1, 0x75, 0x6, @dev={[], 0xf}}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) lstat(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)) r9 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r9) r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000400)=0x5, 0x2) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x1, 0x0, {0x6}}, 0x18) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r10, r11, 0x0, 0x10000) 18:20:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:47 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1946.500875] audit: type=1804 audit(1574533247.168:7871): pid=20678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/624/file0/file0" dev="loop1" ino=512 res=1 [ 1946.566439] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1946.609748] audit: type=1800 audit(1574533247.168:7872): pid=20678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=512 res=0 [ 1946.650550] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1946.671575] protocol 88fb is buggy, dev hsr_slave_0 [ 1946.676738] protocol 88fb is buggy, dev hsr_slave_1 [ 1946.681930] protocol 88fb is buggy, dev hsr_slave_0 [ 1946.687044] protocol 88fb is buggy, dev hsr_slave_1 18:20:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x7f', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:47 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000000), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000380), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 1946.713491] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:47 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1946.771601] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1946.794405] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:47 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 1946.838016] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1946.910796] FAT-fs (loop1): bogus number of reserved sectors 18:20:47 executing program 2: r0 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x40000, 0x10) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) creat(&(0x7f0000000180)='./file0\x00', 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) r2 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000140)={0xffff, 0x7fff, 0xe2, 0x5, 0x80000000, 0x80000000}) [ 1946.958652] FAT-fs (loop1): Can't find a valid FAT filesystem 18:20:47 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:47 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x333) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000180)=0xe8) 18:20:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x8c', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:47 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fallocate(r2, 0x15, 0x7, 0x9) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r3, 0x0, 0x10000) [ 1947.153980] protocol 88fb is buggy, dev hsr_slave_0 [ 1947.159991] protocol 88fb is buggy, dev hsr_slave_1 18:20:47 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x10) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x2, &(0x7f0000000140)=[{&(0x7f00000001c0)="27bf4d6557bb87267e98aab7d1fc68b3b4deff6c113809d644795cc7e52f2350844e95ce156dcbcc6aeee7c195ae690f9f00c10c2f50156bdda25ada2e8d30619458e3973b7a068d1acaaa7189b5029976f6f07074f8fea4740215f7ee3f4fd3c763ec81b17ef6dd3696c5afec92ec76ca233bbd7f54a227a0cc99ef1aa1e5a5f86d6de7aa7461f90b2ea3b1c83a1b609684d3d47a765f853715cbe4b267cf6ce61f4acd017214c272e3e74c2c6cf389f6a5e5e1c2df34f8a58cf13ae87becd5c009989bc2fd98a38739d517cd0772d9293b5426515f", 0xd6, 0x3}, {&(0x7f00000002c0)="53ce5e2051ffae4d10289a04b3c829bf9051d42b84bb44cc448dbef0ea734af364ea271d37f95083c327f80e9e01d40e9761935cb78442020eb4f05d82a0e40191b9bf8880db80e756547cddd21327e39f49fdffcd1806db21199d45210785674233b741195e4a38fb36a91c95856ffcc1ea494269970b5ddcedf0", 0x7b, 0x5}], 0x200000, &(0x7f0000000340)='\xec\xff') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYRES32=r0], &(0x7f0000000100), 0x0) 18:20:48 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1947.416526] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:20:48 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000540)=""/4096) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000), &(0x7f0000000040)=0x14) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x40000}}, 0xa}}, 0x0) 18:20:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xf6', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1947.459720] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:48 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x29b8c3032a375e9b) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100), 0x0) [ 1947.515121] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1947.580733] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:48 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r1 = dup(r0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ifb0\x00'}}) 18:20:48 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011002b04372efedd4e249e0d25d52d0d0400000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 18:20:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xfe', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:48 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:48 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:48 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000004ed09e7b67bdaa5ebf9cec200255f88fa89ca3a0a52e56778b69831474ca7262ec76b1b021363be73c8a748a5060c011f59f8421f110795dcc3cdba20657f075f8efefbfebfb8326fa37cd4077e2ffc0d50f6a98cf1d0d385b5ab12086dcaa214b5056a4de27cb0107d85d04837bcf5ba2faa545bb0f9a8bb53e6d778eb5b408"], 0x20}}, 0x0) [ 1947.982214] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1948.028165] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:48 executing program 1: ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) prlimit64(0x0, 0xf, &(0x7f0000000280)={0x0, 0x9}, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4) socket$pppoe(0x18, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:20:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1948.081717] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:48 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x7f, 0x4, 0x5, 0x5}, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1948.122658] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1948.212858] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1948.245014] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:48 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:49 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011000d040002e600000000007ae8b66ed1b9e9e505be86000000009fe96fff389ec3ef36c4aae9ae7983e7787391c109a6f924d1b12ca80456a2b416acc35f6c4c22345a4b185ffdcfae97bcd2004bb5816b7e8c6ce3204c1555758f608bcec12901025d9dd392aee1f3c6c37fc3453a488bda0860334c25959b5bebf59dfc1fa6bde4a0", @ANYRES32=r2, @ANYBLOB="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"], 0x20}}, 0x0) [ 1948.315307] kauditd_printk_skb: 2 callbacks suppressed [ 1948.315324] audit: type=1804 audit(1574533248.988:7875): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/627/file0" dev="sda1" ino=16659 res=1 [ 1948.406060] audit: type=1800 audit(1574533248.988:7876): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16659 res=0 [ 1948.513890] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1948.547473] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1948.566743] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1948.580748] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1948.604399] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:49 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:20:49 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:49 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:20:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:49 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = dup2(r0, r1) r3 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r4, 0x6, 'YBB', "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"}}, 0x110) [ 1948.656456] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1948.738624] audit: type=1804 audit(1574533249.408:7877): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/628/file0/file0" dev="sda1" ino=16531 res=1 [ 1948.784477] audit: type=1800 audit(1574533249.408:7878): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16531 res=0 [ 1948.790840] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:49 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="132c58efb69e85dcef2043c2478926cd3d7cee4352eebfd860787727a64930f95afdefb7"], 0x20}}, 0x0) ioctl$void(0xffffffffffffffff, 0x5451) [ 1948.856860] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\xff', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:49 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000400)="8a92bf0255bc5af6b0e98941328385dd6c4a3d4b7b7014d9fc3b21c16c301511bb60e30296281300000000000000007999a0d81ae39dce420b78c01e9b923bbd1615d0705dc6d3f075d0b6c9867d1157e63aad8d769c3b311d0b69552baec1a0147c73e0f6d123abb6f09866312b37605b01b7824b6060e68b98d27e87c77116dd03", 0xfffffffffffffecf) getpeername$tipc(r4, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffffb5) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r5 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r7 = accept4(r6, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0xfffffffffffffee7, 0xc0000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) fallocate(r7, 0xc0, 0x18000000, 0x6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000000)={{0x2, 0x0, @descriptor="1a2633a66f659270"}}) 18:20:49 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:49 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1949.024313] audit: type=1804 audit(1574533249.698:7879): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/629/file0/file0" dev="sda1" ino=16641 res=1 18:20:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:49 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x40}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000500)={0x2, 0x8002, 0x1, 0x0, r5}, &(0x7f0000000540)=0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f0000000080)={'ip_vti0\x00', 0x7}) r7 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r8 = accept4(r7, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r9, 0x40345622, &(0x7f0000000440)={0x401, "c453e3b998c445498e2c407b26ffca08743b375ab787688f034748927b4cf62b", 0x2, 0x2}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000001300)=[{&(0x7f0000000cc0)="f74ce1f9830645792b080a0be4df2aaa36232511e77642b6f2cb9736843b87292a89f0c12cbc42a407bd029e38661fbac8e1937caf216963aa61e26a68d6f2f09f0e4a3e0bc712057b73964d966f28bfa768ba075dba72051644acd2bdc06f2e451a1d4f04deddf90b706fe318596c482bfcb1bef70e4161e32f336890b371f2a4992323bfebbb7aa2f180322c108b59fc14c241"}, {0xfffffffffffffffe}, {&(0x7f0000000e00)="58ddb81ca660c1f0d3b298830863ee152ed25e231ad12c2b643d5c49a77a8a680e13bcbd7cf8db5fbc9176ac2f80178e4b22943e6c203615a449e0db35d8baac03551acd44813f6fd309062d5f1445b5ea40"}, {&(0x7f0000000e80)="6e0419a7e5cfa5179287133d12b5d42645b755c091783971edb8089dd350888d05078066b4b44209e42ba5f9dbc38f4c8e1eca00d5deaaf07d591d418a244a13728348df6003b16b23c01769f80442fd5a136997eb7fb9badda5d52d12b0c91021f4fddee57c079d3339dcc024d13bbaa3f59f663687434ddff900ff0594a856023b157ba77cc148f5ea3f110eacc87de1fa1449ff69f2f432c55aed2899855f07f015ddd1cacddc7dafa9eeba727b7da691a78b94fe17793fb35f94db4d1ee1354bcb13010b65"}, {&(0x7f0000000f80)="4203843855279853dc32b748e4f9b6cdc984cb5058d2e187bbd252026b5dd17f89b7f791250853"}, {&(0x7f0000000fc0)="90ded82817d13db348cf46d54e8c244ffd5ea489542f0ff92e0853b4d080b7bd9129e4efbcdf4b401b046a672a0637faf36f706f"}, {&(0x7f0000001000)="53505422376c0ce13e02e3dbb53928958613aa84b6d8b3903a8ebf4541084e8f49cb8973c5f647f10fb36c3e2cc30434abb66b9b9de36f7493f9428a84b150d721a0c157f9c77cb7742c3bd622aff290835710215866794de898b3990b188d5c2182cb4356126e07b8fe93c0ab41d9ebb51c049eb396864a8d8e873447b9be7b12b06e74f2ee33f470e05d2d54c7f58f26f373bda2d3858e5425b14a91aa1dba2639a9de"}, {&(0x7f00000010c0)="8223a043d9bbfee098ea9dddbfe4c01c83ef843e0e16692f3ed13c8c75aa8a1cc9aa0505a013bf5016ca730d6a2a1b6c6575a7973e5fd7e780bca03f9a53fe8a5012cf798908c7b079b773b87161c78d3d34b66d88a081338c7bc13392b58abf45a41b208514b93834da2b0a01268d87d925c04253afbf4056f49a585f6ff7e43457a893d9ec26d7f4a7db539db1d7ab1b17546ac2febd3c3ea5996e74387034f7019900c4f1386592e105cc6651d58a0beb024b05d6f88e9d8001b02e62e28ac3615a1cfb796c1c3ec84542e2ac4e16b1051312fd5797c093a692c2d9cbc646505aaf8285132c"}, {&(0x7f00000011c0)="45e94a3417bf6faf14d6fc948a4e38dc06ed74bca7672ee457"}, {&(0x7f0000001200)="3826de021c23e9f00b90afff049b5722ba68d28c1d6338ad0d59a1e3f67553ebe734fc1b4eeb366465fc98475196ad2ca8bd689009266dff05698b47aaf2625261e34de93bc7829ed837df78ab2255bcc01095726d4081f52d18e510153e295af3839eea4c40bd49ac1ce44ef85d02c4a597105df2fd48b56e5cceaf744c66a2ac737da779c0848b9cefe181b64d1d2d1c36d122af2e076d318f69ad40395a7ede087c5aa903d69e3fa82fe17109701c4addb8e3352804d35db7c90ecede003fff8d14b02a"}], 0x1000000000000051, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000280)=0x4000) ioctl$DRM_IOCTL_AGP_ENABLE(r10, 0x40086432, &(0x7f0000000240)=0x4) close(r8) r11 = gettid() tkill(r11, 0x1000000000013) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000d04000000040000000000000000", @ANYRESHEX=r11, @ANYBLOB="000000000002ddfff4c34e1b893585da3862ae66d4f743b1ff95c6bec5e7c8cb57a10d75388d74b909fa854c48a917b1e163fbb7fb876f6056bb4f0f4a9333a797a41c21ac4aebeed4"], 0x3}}, 0x21) r12 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x30000, 0x0) ioctl$PPPIOCATTACH(r12, 0x4004743d, &(0x7f0000000380)=0x4) [ 1949.142443] audit: type=1800 audit(1574533249.698:7880): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16641 res=0 18:20:49 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_open_dev$dmmidi(0x0, 0x800, 0x193000) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1949.296481] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1949.298339] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1949.318174] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1949.338380] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1949.352750] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:50 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1949.387693] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:50 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0880000000080000"], &(0x7f0000000100), 0x0) [ 1949.493100] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1949.522935] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:50 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:50 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1949.730581] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1949.747334] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1949.768334] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1949.779145] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1949.795898] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:50 executing program 0: syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:50 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) semctl$IPC_STAT(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=""/197) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x2512, {0x7f, 0x1, 0x1f, 0xf8, 0x76, 0x9}, 0x0, 0x1f}, 0xe) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00 \x00\x00'], &(0x7f0000000100), 0x0) 18:20:50 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @multicast1}], 0x20) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:20:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1949.828588] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1949.930075] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1949.947657] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1950.082806] audit: type=1804 audit(1574533250.758:7881): pid=20938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/630/file0/file0" dev="loop1" ino=513 res=1 [ 1950.131582] audit: type=1800 audit(1574533250.758:7882): pid=20938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=513 res=0 [ 1950.831555] net_ratelimit: 18 callbacks suppressed [ 1950.831564] protocol 88fb is buggy, dev hsr_slave_0 [ 1950.841952] protocol 88fb is buggy, dev hsr_slave_1 [ 1950.847196] protocol 88fb is buggy, dev hsr_slave_0 [ 1950.852781] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.311525] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.316694] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.551528] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.556862] protocol 88fb is buggy, dev hsr_slave_1 [ 1951.951557] protocol 88fb is buggy, dev hsr_slave_0 [ 1951.951562] protocol 88fb is buggy, dev hsr_slave_0 18:20:52 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffff590, 0x220000) accept4(r3, 0x0, &(0x7f0000000040), 0x80800) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="0000fec45601fc1dee578eba3ba0df00000058fa33502d244212b0086a4e2354938a3155da76c2eb486676c6ea53"], 0x20}}, 0x0) 18:20:52 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:52 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:52 executing program 0: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:52 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) r0 = open(&(0x7f0000000000)='./file0/file0\x00', 0x20000, 0x194) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = socket(0x0, 0xa, 0x1) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r4 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1}, &(0x7f000095dffc)=0x1) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0x1000, "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"}, &(0x7f0000000180)=0x1008) fchdir(r1) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r7 = gettid() tkill(r7, 0x1000000000013) r8 = getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r9, &(0x7f0000000140)={r0, r0, 0x7}) sendfile(r5, r6, 0x0, 0x10000) 18:20:52 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x4) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) name_to_handle_at(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)=ANY=[], &(0x7f0000000100), 0x1000) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="02aea471786c78f949db50fb4ce36acc471283847ff2ac19d4"], 0x12, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2, 0x2, 0xe0a748dab64e214, &(0x7f0000ffc000/0x1000)=nil, 0x91}) 18:20:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1952.344361] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1952.375963] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1952.420167] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1952.440520] audit: type=1804 audit(1574533253.108:7883): pid=20966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/631/file0/file0" dev="loop1" ino=514 res=1 18:20:53 executing program 0: syz_read_part_table(0x0, 0x0, 0x0) creat(0x0, 0x0) 18:20:53 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(0xfffffffffffffffe) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="cffa2000000011000d0400001200000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1952.477500] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1952.519496] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1952.559904] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1952.573084] audit: type=1800 audit(1574533253.108:7884): pid=20966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=514 res=0 [ 1952.597374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20979 comm=syz-executor.3 [ 1952.615094] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1952.632890] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1952.663621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=20984 comm=syz-executor.3 18:20:53 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:53 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000019000200ff030000ffdbdf2502148004fe04fe07002a000002000bf6fe0700001584b297b2f03fe9426f0709814f00000000000000"], 0x3f5}}, 0x0) 18:20:53 executing program 0: syz_read_part_table(0x0, 0x0, 0x0) creat(0x0, 0x0) 18:20:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1952.824884] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1952.845080] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:53 executing program 0: syz_read_part_table(0x0, 0x0, 0x0) creat(0x0, 0x0) 18:20:53 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x206001, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f00000000c0)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x5f4, {0x9, 0x89d1, 0x81ae, 0x0, 0xd2, 0x1}}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000000000)) [ 1952.924805] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1952.987905] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1953.007434] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1953.037945] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1953.052647] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1953.073313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:55 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:55 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f00000001c0)=""/157) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="08000000e1ffffff494a3f2fae00cbd9e36a0359d588aab05236eca65eb499a63a81f33a6f161b44b3"], &(0x7f0000000100), 0x0) 18:20:55 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:55 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0xffffffffffffffad, 0x80800) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000240)={0x8ccf8c8c94e76af2, 0x14, &(0x7f0000000080)="87abe83217c69ece11071872974e67330ecb3431"}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sync_file_range(r3, 0x6, 0x100000001, 0x3) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000116f0d04000000000000000000000000a547a9d05d893312d2d7f4a815efd54d56a638b36ffdbecbb02d1f74bba3caf8211cf0cfc105d03a6c363d07fb357ce5dd3e641deca98f0413ebf8f7f692147b3a48fb60fbc9d57e34c1ecf387dc5da4c84e3c11bd68d874038f3bfba94543dc63963b16b915bff95aab16d06cc68f069b16", @ANYRES32=r5, @ANYBLOB="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"], 0x20}}, 0x0) 18:20:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x80003) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 18:20:55 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x20) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @initdev}, &(0x7f00000000c0)=0xc) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r3, 0x0, 0x10000) 18:20:56 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="4d4d00000000000017d2c5822c15a427b77c989eab3073aa9b691ed4df8658d2927e83f1a521633bad3433ba16053dd1eac491bc"], &(0x7f0000000100), 0x0) [ 1955.360372] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1955.392946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28433 sclass=netlink_route_socket pig=21039 comm=syz-executor.3 [ 1955.422059] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1955.453512] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:20:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0xa, 0x4e21, 0x4, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000540)}, 0x2004c004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0xa1a3f945407a2941) r4 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x10000000000443) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) open(&(0x7f00003b6ff8)='./file1\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r6, 0xc10c5541, &(0x7f0000000140)={0x5, 0x2, 0x9, 0x0, 0x0, [], [], [], 0xe67f, 0x8d}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1955.468604] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1955.511753] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:56 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000380)=0x100) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) sendto$inet6(r0, &(0x7f00000002c0)="4a61b65551ad6712ab0d6ba96b3306f3a78edfd69d57de0e96ad77c3d1757d0208733209f516e56941192773a7d67187a79a1534b98d0257fadbdfb03f49c773d413081dbb1e2a1efdefb5a40f22759db914cfccb93c3504a31b4ed6d0a32a6c4f7f5ee338b7b82d073da33c4779e233525fcd2676ca6a80f378cf404e90b4fc4c944661928315811fe398491ea915d98910", 0x92, 0x4050, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000240)={{0x1, 0x3}, 0x3, 0x401, 0x1, {0x7, 0x3}, 0x0, 0x7}) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="43ffffff01000000"], &(0x7f0000000100), 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000000)=0x3f, 0x4) [ 1955.525538] audit: type=1804 audit(1574533256.198:7885): pid=21050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/632/file0/file0" dev="loop1" ino=515 res=1 18:20:56 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1955.593486] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1955.615404] audit: type=1800 audit(1574533256.198:7886): pid=21050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=515 res=0 18:20:56 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:56 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000440)={0x7}, 0x7) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 18:20:56 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="08000000000000003651f20e3b7ac149b7dc37f5aa9c7bbef4d59fc4264a6c259e135fbc80d0c20d3d513781ca637a7c156693fb75e6bde45981d2e1132a"], &(0x7f0000000100), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = getpgid(0x0) r3 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) r5 = dup2(r4, r3) writev(r5, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x2f240, 0x0) r10 = gettid() tkill(r10, 0x1000000000013) r11 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r11, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r12 = accept4(r11, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r12, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) fsetxattr$system_posix_acl(r9, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000100eb0000000000020001", @ANYRES16=r12, @ANYRES32, @ANYRESDEC=r0, @ANYRES64=r10, @ANYRES32, @ANYBLOB="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", @ANYBLOB="74b24e1f0ef01479f571f55b37d7089c077e74b1bd50a45834473f982e6fd1fd97f815af9ca38040c073a4e24e033248357bfb5ab67092f29f0b1a66e443cc9e9ef2a93a80607607e3231fc4077092a7af7f95cd0ac29c703cc271896016d7b31ca22f3b0b56e5fec2690ec778d14906d776e06d1e11235fee66cd857682429cbe849c5b"], 0x8, 0x1) r13 = socket(0xa, 0x3, 0x8) r14 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) creat(&(0x7f00000005c0)='./file0\x00', 0x9bba231306e08c9c) r16 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r16, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r16, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[]}}, 0x20000011) r17 = gettid() waitid(0x83b895581628fca4, r17, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r15, @ANYRESDEC=r17]], 0xfffffffffffffe56}}, 0x20004850) r18 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r18) r19 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r19, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r19, 0x227d, &(0x7f0000000780)) kcmp(r2, r17, 0x1, r14, r19) ptrace$setopts(0x4206, r18, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0x2}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r18, 0xffffffffffffffff, 0x0, 0xffffffffffffff4b, &(0x7f0000000180)='/dev/amidi#\x00', r20}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r20}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r20}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r20}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r20}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r20}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r8, r9, 0x0, 0x1, &(0x7f0000000080)='\x00', r20}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r6, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r20}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r20}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r5, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r20}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x1, &(0x7f00000001c0)='\x00', r20}, 0x30) [ 1955.869947] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x2004c004) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x10000000000443) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) open(&(0x7f00003b6ff8)='./file1\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000140)={0x0, 0x2, 0x9, 0x0, 0x0, [], [], [], 0xe67f, 0x8d}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1955.913599] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1955.923179] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1955.941708] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:20:56 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1955.953925] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1955.983323] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1956.111509] net_ratelimit: 22 callbacks suppressed [ 1956.111517] protocol 88fb is buggy, dev hsr_slave_0 [ 1956.121506] protocol 88fb is buggy, dev hsr_slave_0 [ 1956.121715] protocol 88fb is buggy, dev hsr_slave_1 [ 1956.126718] protocol 88fb is buggy, dev hsr_slave_1 18:20:56 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="22036982332a7ac185599517a24170efd9b546a06f09de8b64f35ee188aa39022c8d086f1f55e851ead5868b957bdc2b00204f911d4ba4650d7ad827cf647f9cb87ff1c1a6e754006f0ee18915008d052543db15f37160850a82f03868126d6d844ffe8e9461d30ce23a0997be13a34b5f5d62abdd6e7c1ffa2c71eaabec3f0fbfaaa3de45f103be2b202bc903159624c96f07ff8f669cc18494c2661977d7"], 0x20}}, 0x0) 18:20:56 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1956.168007] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1956.185861] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:56 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:57 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) pipe2(&(0x7f0000000300), 0x104800) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r3 = open(0x0, 0x141042, 0x0) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000580)={'syz_tun\x00', 0xefe, 0x7f7}) r4 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) write$P9_RFLUSH(r4, &(0x7f0000000340)={0x7}, 0x7) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) getdents(r3, &(0x7f00000003c0)=""/240, 0xf0) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_udplite(0x2, 0x2, 0x88) r6 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r6, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) setsockopt$inet_udp_int(r6, 0x11, 0xa, &(0x7f00000004c0)=0x6a9a8c17, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000140)=0xc) setuid(r7) r8 = getegid() keyctl$chown(0x4, r5, r7, r8) sendfile(r1, r2, 0x0, 0x10000) 18:20:57 executing program 0: socket(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@check_relaxed='check=relaxed'}, {@gid={'gid'}}]}) 18:20:57 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$rds(0x15, 0x5, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1956.432211] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1956.441295] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1956.500625] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1956.507823] audit: type=1804 audit(1574533257.168:7887): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/633/file0/file0" dev="loop1" ino=516 res=1 [ 1956.529205] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1956.580659] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1956.605253] ISOFS: Unable to identify CD-ROM format. 18:20:57 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xd6, 0x4) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:20:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1956.625975] audit: type=1800 audit(1574533257.218:7888): pid=21105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=516 res=0 [ 1956.667875] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:20:57 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xc6) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1956.821846] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1956.858938] audit: type=1804 audit(1574533257.528:7889): pid=21134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/634/file0/file0" dev="loop1" ino=517 res=1 [ 1956.870978] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1956.905707] audit: type=1800 audit(1574533257.558:7890): pid=21134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=517 res=0 [ 1957.071624] protocol 88fb is buggy, dev hsr_slave_0 [ 1957.076748] protocol 88fb is buggy, dev hsr_slave_1 [ 1957.081940] protocol 88fb is buggy, dev hsr_slave_0 [ 1957.087032] protocol 88fb is buggy, dev hsr_slave_1 [ 1957.551534] protocol 88fb is buggy, dev hsr_slave_0 [ 1957.556707] protocol 88fb is buggy, dev hsr_slave_1 18:20:59 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x9, 0x0, 0x2, 0x4, '\x00', 0x3}, 0x0, [0x8020000000000000, 0x7, 0x0, 0x2, 0x2, 0xfffffffffffffeff, 0x7, 0x8, 0x0, 0x4, 0xfffffffffffff800, 0x8fd, 0x5, 0x21c0000000, 0xfffffffffffffffd, 0x6, 0x80000001, 0xc, 0x0, 0x4, 0x7, 0x20, 0x549, 0x9, 0x9, 0x6, 0x6dfb, 0x6, 0x100000001, 0x4ab, 0x6, 0x100, 0xc638, 0x81, 0x5, 0x1a, 0x8000, 0x278, 0xdfaa, 0x100000, 0xcc9, 0x9, 0x0, 0x2, 0x8ec8, 0x4000000000000, 0x7ff, 0x1, 0x6, 0xfffffffffffffff7, 0x6, 0x7, 0x306a, 0x20b, 0x10000, 0x10000, 0x191, 0x6, 0x3, 0x7, 0x8001, 0x6, 0x0, 0x2, 0x0, 0x3f, 0x7ff, 0x9, 0x7f, 0x101, 0x7, 0x80000001, 0x9c, 0x1f, 0x5, 0x10001, 0x2000000000000000, 0xa23, 0x665e, 0x5b, 0x8001, 0x47b0, 0x3f, 0x3f, 0x2, 0x3, 0x329c, 0x1, 0x7fff, 0x10001, 0x0, 0xfffffffffffffff9, 0x9, 0x9, 0x6, 0x1, 0x7ff, 0x1ff, 0x1, 0x81, 0x8, 0x7, 0x20, 0x9, 0x7ff, 0x1000, 0x1f, 0x1, 0x6, 0x9, 0xfffffffffffffffc, 0xa7a, 0x5, 0xc22, 0x0, 0x9, 0x8000, 0x7, 0x101, 0x6, 0x4c8, 0x401, 0x2223, 0x6, 0x8, 0x2, 0x7f, 0x100000000], {0x77359400}}) write$P9_RCREATE(r0, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x2, 0x0, 0x3}, 0x6a6}}, 0x18) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x3, 0x0, 0x7, 0x400, 0x4}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:20:59 executing program 0: socket$alg(0x26, 0x5, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x25d) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$alg(0x26, 0x5, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000240)=0xedad, 0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) fcntl$setstatus(r0, 0x4, 0x42000) request_key(0x0, 0x0, 0x0, 0x0) request_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 18:20:59 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:20:59 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r3 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x37618674b3c966ee}) sendfile(r1, r2, 0x0, 0x10000) 18:20:59 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:20:59 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1958.922651] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1958.945124] audit: type=1804 audit(1574533259.618:7891): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/635/file0/file0" dev="loop1" ino=518 res=1 18:20:59 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:20:59 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000400)=""/190, 0xbe}, {&(0x7f0000000540)=""/229, 0xe5}], 0x2, &(0x7f0000000380)=""/11, 0xb}, 0x22) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={r2, @multicast1, @rand_addr=0x4}, 0xc) r3 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:20:59 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x100) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x200, 0x0, [], {0x0, @reserved}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) [ 1959.042146] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:20:59 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e003, 0xaaaadd6, &(0x7f0000000380)=[{&(0x7f0000000140)="eb3c906d6b66732e666174000204010002000270fff8", 0xfe}], 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xe031, 0x701100) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x3f, 0x4) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x140) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r5 = semget$private(0x0, 0x20000000102, 0x0) semop(r5, &(0x7f0000000080)=[{0x1}, {0x0, 0xffffffff}], 0x2) semop(r5, &(0x7f00000000c0)=[{0x0, 0x6}], 0x1) semctl$SEM_STAT(r5, 0x3, 0x12, &(0x7f0000000580)=""/4096) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) name_to_handle_at(r0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000001580)={0x8d, 0xfffffff8, "38f0f5e8a87fa95afb97b7e192458f554b55a281d3817ad0bd170ac49bf132806e2a539437202071402de14b4b659679959f832505208529bf40eb9d8d45d8ee7f396ce8b80a3587e39c48adb0e2e5c71c11aa527ba475f9f4bd2054d7b02d97a5c211fe4ae01a0ba4a3795efd47e6d2f62afae11ca8e22c27cd8e4c25989d59bb80fadc78"}, &(0x7f0000000500), 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0xf0) ptrace$getregset(0x4204, r6, 0x27ca0472bbcfe896, &(0x7f0000000180)={&(0x7f00000003c0)=""/132, 0x84}) sendfile(r2, r3, 0x0, 0x10000) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x42, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000340), &(0x7f0000000480)=0x4) [ 1959.117037] audit: type=1800 audit(1574533259.648:7892): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=518 res=0 18:20:59 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1959.176699] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1959.261815] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:00 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d678488d8ffffff080000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1959.320906] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1959.338349] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1959.369108] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1959.378193] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:00 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1959.471939] device bridge_slave_1 left promiscuous mode [ 1959.483169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1959.544606] device bridge_slave_0 left promiscuous mode [ 1959.561933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.637969] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1959.677793] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1959.731556] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1959.745485] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1959.746583] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:00 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1959.781564] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:00 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100), 0x0) 18:21:00 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1959.993422] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1960.054625] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:00 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x248000, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x1ff, 0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:21:00 executing program 2: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x0) sendto$unix(r0, &(0x7f00000001c0)="db37011e9474c7ea370fd2911d22d0a8d337b74d9fd5684cbcd3f65cc4a37dafa19c42c1759310c70711c6f74643ff4b4709c557a349b2f21e338f3cd25431362bd92837426ec7f69cc36455060b487656b8e923827a3814c27c2a66ed1e57384e75c5845e23c4933a34d9050720add8d0a00910994d32fb6e0b", 0x7a, 0x20004001, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 18:21:00 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:00 executing program 2: creat(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xde8, 0x40880) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0800000000000000ddf0250e05ac613a52a0cd7b87b171e6a16eb2d10215f56e009cf60710595a51adde5ee487fdf5a13798df849cdbfd218eef5222419c4b3d293245ca39dffc080d42c5327ad3081bf3ed77a2fa2eab82cd15366e23c371317f0f6d6e46576d2ae6d14fed9ac71c56a83f8e76ff3ce7aec524e0"], &(0x7f0000000100), 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) [ 1960.215348] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1960.287400] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1960.296259] audit: type=1804 audit(1574533260.968:7893): pid=21241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/637/file0/file0" dev="loop1" ino=519 res=1 18:21:01 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffeb6, &(0x7f0000000280)={&(0x7f0000000500)=@getaddr={0x0, 0x16, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x20}}, 0x0) [ 1960.358738] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000040)) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x541d) fchdir(r0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_hsr\x00'}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 1960.410166] audit: type=1800 audit(1574533261.008:7894): pid=21241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=519 res=0 [ 1960.427307] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1960.451937] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:01 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$packet(r0, &(0x7f0000000240)={0x11, 0x1a, r1, 0x1, 0x7f, 0x6, @remote}, 0x14) pipe(&(0x7f0000000100)) pipe(&(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1960.455037] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:01 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1960.619421] audit: type=1804 audit(1574533261.288:7895): pid=21264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/638/file0/file0" dev="loop1" ino=520 res=1 [ 1960.634013] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:01 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:01 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1960.649082] audit: type=1800 audit(1574533261.318:7896): pid=21264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=520 res=0 18:21:01 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000140)={0x4, 0x0, 0x7, 0x4, 0x3, 0x558, 0xeb6, 0x2, 0x7, 0x1, 0x1, 0x5, 0x7, 0x6, &(0x7f0000000040)=""/3, 0x0, 0x3, 0x7fff}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) [ 1960.729355] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1960.787394] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1960.797151] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1960.816672] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:01 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1960.841359] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:01 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1960.964728] audit: type=1804 audit(1574533261.638:7897): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/639/file0/file0" dev="sda1" ino=16522 res=1 18:21:01 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0x1, 0x3, 0x7fffffff}) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000140)=0x3, 0x4) fchdir(r0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 1961.095821] audit: type=1800 audit(1574533261.668:7898): pid=21289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16522 res=0 [ 1961.106822] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:01 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1961.231519] net_ratelimit: 18 callbacks suppressed [ 1961.231527] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.241657] protocol 88fb is buggy, dev hsr_slave_1 [ 1961.246827] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.252042] protocol 88fb is buggy, dev hsr_slave_1 [ 1961.277745] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1961.287830] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1961.297774] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1961.312106] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1961.328624] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1961.397307] audit: type=1804 audit(1574533262.068:7899): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/640/file0/file0" dev="sda1" ino=16708 res=1 18:21:02 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffec0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="0000040000000000"], 0x20}}, 0x0) 18:21:02 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:02 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:02 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000000c0)) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r3, 0x0, 0x10000) [ 1961.563816] audit: type=1800 audit(1574533262.118:7900): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16708 res=0 18:21:02 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1961.704393] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1961.718082] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.718149] protocol 88fb is buggy, dev hsr_slave_1 18:21:02 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = getpgid(0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x1) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1961.819533] audit: type=1804 audit(1574533262.488:7901): pid=21328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/641/file0/file0" dev="loop1" ino=521 res=1 [ 1961.870971] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1961.908514] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1961.913496] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1961.935257] audit: type=1804 audit(1574533262.538:7902): pid=21328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/641/file0/file0" dev="loop1" ino=521 res=1 [ 1961.966131] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1961.973562] protocol 88fb is buggy, dev hsr_slave_0 [ 1961.980856] protocol 88fb is buggy, dev hsr_slave_1 18:21:02 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff65, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:21:02 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1962.014382] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:02 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:02 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:03 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2002000000000d0400000000000000000000118b103769000064a631759cb1dfaa9739834f0d38891264c50d33423eb8f0a2ac6d", @ANYRES32=r2, @ANYBLOB="1000000000000000"], 0x20}}, 0x0) [ 1962.304539] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1962.332803] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1962.351539] protocol 88fb is buggy, dev hsr_slave_0 [ 1962.356669] protocol 88fb is buggy, dev hsr_slave_1 18:21:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1962.496002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21366 comm=syz-executor.3 18:21:03 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x1c0, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd65f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f2c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4080}, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) socket$inet6(0xa, 0x8004808000080003, 0x3) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00I\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000015000000"]}, 0x1, 0x0, 0x0, 0xc5e49a4989420d5}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$SEG6(&(0x7f00000024c0)='SEG6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1962.615435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=21369 comm=syz-executor.3 [ 1962.694248] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1962.727654] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1962.741636] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1962.767566] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:03 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0) remap_file_pages(&(0x7f0000131000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x10000000002) mount$9p_xen(&(0x7f0000000000)='+system)&posix_acl_access%\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x200000, &(0x7f0000000180)={'trans=xen,', {[{@afid={'afid', 0x3d, 0x8}}, {@access_client='access=client'}, {@version_9p2000='version=9p2000'}, {@cache_mmap='cache=mmap'}, {@cache_loose='cache=loose'}, {@cache_mmap='cache=mmap'}]}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400eaffff0600000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1962.796938] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1962.869833] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:03 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:03 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:03 executing program 2: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r0 = syz_open_dev$dmmidi(0x0, 0x800, 0x193000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3e, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a0700ff2eff07000000000000000000000000000000000000000000004200000000000000018000000000000300000000000000000000000055aa", 0x40, 0x1c0}]) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000280)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1963.177923] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1963.350410] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1963.435632] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1963.546712] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:04 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) 18:21:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1963.592909] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1963.638504] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:04 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f00000000c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000040)=@default) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xfffffffffffffe90, 0x11, 0x40d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1963.768554] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:04 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1963.812662] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:04 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:04 executing program 2 (fault-call:0 fault-nth:0): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:04 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1964.084116] FAULT_INJECTION: forcing a failure. [ 1964.084116] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.125028] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1964.151749] CPU: 0 PID: 21426 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1964.159611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.169008] Call Trace: [ 1964.171607] dump_stack+0x197/0x210 [ 1964.175231] should_fail.cold+0xa/0x1b [ 1964.179112] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1964.184212] ? lock_downgrade+0x880/0x880 [ 1964.188359] __should_failslab+0x121/0x190 [ 1964.192584] should_failslab+0x9/0x14 [ 1964.196379] __kmalloc+0x2e2/0x750 [ 1964.199910] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1964.205439] ? fput+0x128/0x1a0 [ 1964.208796] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1964.214334] ? strnlen_user+0x15f/0x1e0 [ 1964.218374] ? __x64_sys_memfd_create+0x13c/0x470 [ 1964.223217] __x64_sys_memfd_create+0x13c/0x470 [ 1964.227880] ? memfd_fcntl+0x1750/0x1750 [ 1964.231931] ? do_syscall_64+0x26/0x620 [ 1964.235899] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1964.240471] ? trace_hardirqs_on+0x67/0x220 [ 1964.244791] do_syscall_64+0xfd/0x620 [ 1964.248589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1964.253765] RIP: 0033:0x45a639 [ 1964.256959] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1964.275857] RSP: 002b:00007fc48714c9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1964.283570] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a639 [ 1964.290833] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf447 [ 1964.298093] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1964.305350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc48714d6d4 [ 1964.312614] R13: 00000000004bf447 R14: 00000000004e2670 R15: 0000000000000003 [ 1964.325605] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1964.414889] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1964.424551] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1964.438736] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:05 executing program 2 (fault-call:0 fault-nth:1): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:05 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1964.486322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1964.557260] FAULT_INJECTION: forcing a failure. [ 1964.557260] name failslab, interval 1, probability 0, space 0, times 0 [ 1964.562496] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1964.573803] CPU: 1 PID: 21439 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1964.589881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1964.599254] Call Trace: [ 1964.601871] dump_stack+0x197/0x210 [ 1964.605535] should_fail.cold+0xa/0x1b [ 1964.609465] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1964.614600] ? lock_downgrade+0x880/0x880 [ 1964.618783] __should_failslab+0x121/0x190 [ 1964.623057] should_failslab+0x9/0x14 [ 1964.627013] kmem_cache_alloc+0x2ae/0x700 [ 1964.631187] ? __alloc_fd+0x44d/0x560 [ 1964.635129] ? shmem_destroy_callback+0xc0/0xc0 [ 1964.639825] shmem_alloc_inode+0x1c/0x50 [ 1964.643934] alloc_inode+0x64/0x190 [ 1964.647675] new_inode_pseudo+0x19/0xf0 [ 1964.651665] new_inode+0x1f/0x40 [ 1964.655054] shmem_get_inode+0x84/0x780 [ 1964.659051] __shmem_file_setup.part.0+0x7e/0x2b0 [ 1964.663912] shmem_file_setup+0x66/0x90 [ 1964.667913] __x64_sys_memfd_create+0x2a2/0x470 [ 1964.672599] ? memfd_fcntl+0x1750/0x1750 [ 1964.676673] ? do_syscall_64+0x26/0x620 [ 1964.680666] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1964.685281] ? trace_hardirqs_on+0x67/0x220 [ 1964.689647] do_syscall_64+0xfd/0x620 [ 1964.693474] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1964.698692] RIP: 0033:0x45a639 [ 1964.702001] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1964.720924] RSP: 002b:00007fc48714c9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1964.728659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a639 [ 1964.735941] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf447 [ 1964.743233] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1964.750524] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc48714d6d4 [ 1964.757815] R13: 00000000004bf447 R14: 00000000004e2670 R15: 0000000000000003 18:21:05 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:05 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000180)={'yam0\x00', 0x6}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240)=0x43, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x3, 0xb, 0x3, 0x3}, {0x2, 0xff, 0x81, 0x8}, {0x1, 0x7, 0xfb, 0x1}, {0x6, 0x2, 0xb8, 0xffffffff}, {0x400, 0xe5, 0x8, 0x5}, {0x0, 0x6, 0x0, 0x883e}, {0x6, 0x7, 0x1, 0xfffffffa}, {0x7f, 0x2, 0x9, 0xfff}, {0x6, 0x2a, 0x9d, 0xe6}]}, 0x10) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x203, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x80) 18:21:05 executing program 2 (fault-call:0 fault-nth:2): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:05 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1964.951229] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1965.004228] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1965.044931] FAULT_INJECTION: forcing a failure. [ 1965.044931] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.082960] CPU: 1 PID: 21459 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1965.090835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.100219] Call Trace: [ 1965.102817] dump_stack+0x197/0x210 [ 1965.106446] should_fail.cold+0xa/0x1b [ 1965.110334] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1965.115963] ? percpu_ref_put_many+0x94/0x190 [ 1965.120455] __should_failslab+0x121/0x190 [ 1965.124697] should_failslab+0x9/0x14 [ 1965.128487] kmem_cache_alloc+0x2ae/0x700 [ 1965.132692] ? map_id_range_down+0x1ee/0x370 [ 1965.137091] ? __put_user_ns+0x70/0x70 [ 1965.140973] selinux_inode_alloc_security+0xb6/0x2a0 [ 1965.146068] security_inode_alloc+0x8a/0xd0 [ 1965.150383] inode_init_always+0x56e/0xb40 [ 1965.154623] alloc_inode+0x81/0x190 [ 1965.158242] new_inode_pseudo+0x19/0xf0 [ 1965.162212] new_inode+0x1f/0x40 [ 1965.165568] shmem_get_inode+0x84/0x780 [ 1965.169535] __shmem_file_setup.part.0+0x7e/0x2b0 [ 1965.174372] shmem_file_setup+0x66/0x90 [ 1965.178349] __x64_sys_memfd_create+0x2a2/0x470 [ 1965.183020] ? memfd_fcntl+0x1750/0x1750 [ 1965.187071] ? do_syscall_64+0x26/0x620 [ 1965.191049] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1965.195631] ? trace_hardirqs_on+0x67/0x220 [ 1965.199944] do_syscall_64+0xfd/0x620 [ 1965.203752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1965.208933] RIP: 0033:0x45a639 [ 1965.212155] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1965.231076] RSP: 002b:00007fc48714c9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1965.238783] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a639 [ 1965.246054] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf447 [ 1965.253323] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1965.260584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc48714d6d4 [ 1965.267842] R13: 00000000004bf447 R14: 00000000004e2670 R15: 0000000000000003 18:21:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:06 executing program 2 (fault-call:0 fault-nth:3): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1965.355523] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1965.371517] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1965.430876] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1965.458517] FAULT_INJECTION: forcing a failure. [ 1965.458517] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.474334] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1965.488291] CPU: 0 PID: 21467 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1965.496123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.505593] Call Trace: [ 1965.508218] dump_stack+0x197/0x210 [ 1965.511900] should_fail.cold+0xa/0x1b [ 1965.515824] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1965.520981] ? lock_downgrade+0x880/0x880 [ 1965.525167] __should_failslab+0x121/0x190 [ 1965.529431] should_failslab+0x9/0x14 [ 1965.533258] kmem_cache_alloc+0x2ae/0x700 [ 1965.537538] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 1965.542669] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1965.547270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1965.552831] ? timespec64_trunc+0xf0/0x180 [ 1965.557090] __d_alloc+0x2e/0x9c0 [ 1965.560568] ? ktime_get_coarse_real_ts64+0x1ba/0x2b0 [ 1965.565794] d_alloc_pseudo+0x1e/0x70 [ 1965.569625] alloc_file_pseudo+0xe2/0x280 [ 1965.573796] ? __lockdep_init_map+0x10c/0x5b0 [ 1965.578313] ? alloc_file+0x4d0/0x4d0 [ 1965.582147] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1965.587887] ? kasan_check_write+0x14/0x20 [ 1965.592155] __shmem_file_setup.part.0+0x108/0x2b0 [ 1965.597115] shmem_file_setup+0x66/0x90 [ 1965.601123] __x64_sys_memfd_create+0x2a2/0x470 [ 1965.605821] ? memfd_fcntl+0x1750/0x1750 [ 1965.609908] ? do_syscall_64+0x26/0x620 [ 1965.613908] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1965.618518] ? trace_hardirqs_on+0x67/0x220 [ 1965.622869] do_syscall_64+0xfd/0x620 [ 1965.626705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1965.631919] RIP: 0033:0x45a639 [ 1965.635129] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1965.654047] RSP: 002b:00007fc48714c9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1965.661782] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a639 [ 1965.669084] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf447 18:21:06 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000100), 0x0) [ 1965.676378] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1965.683674] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc48714d6d4 [ 1965.690986] R13: 00000000004bf447 R14: 00000000004e2670 R15: 0000000000000003 [ 1965.712373] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1965.726795] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:06 executing program 2 (fault-call:0 fault-nth:4): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:06 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1965.908552] FAULT_INJECTION: forcing a failure. [ 1965.908552] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.941400] CPU: 0 PID: 21481 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1965.949361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1965.958805] Call Trace: [ 1965.961577] dump_stack+0x197/0x210 [ 1965.965824] should_fail.cold+0xa/0x1b [ 1965.969723] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1965.974823] ? lock_downgrade+0x880/0x880 [ 1965.978974] __should_failslab+0x121/0x190 [ 1965.983201] should_failslab+0x9/0x14 [ 1965.986992] kmem_cache_alloc+0x2ae/0x700 [ 1965.991135] __alloc_file+0x27/0x330 [ 1965.994843] alloc_empty_file+0x72/0x170 [ 1965.998909] alloc_file+0x5e/0x4d0 [ 1966.002438] alloc_file_pseudo+0x189/0x280 [ 1966.006673] ? alloc_file+0x4d0/0x4d0 [ 1966.010472] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1966.016009] ? kasan_check_write+0x14/0x20 [ 1966.020236] __shmem_file_setup.part.0+0x108/0x2b0 [ 1966.025155] shmem_file_setup+0x66/0x90 [ 1966.029123] __x64_sys_memfd_create+0x2a2/0x470 [ 1966.033783] ? memfd_fcntl+0x1750/0x1750 [ 1966.037833] ? do_syscall_64+0x26/0x620 [ 1966.041812] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1966.046383] ? trace_hardirqs_on+0x67/0x220 [ 1966.050697] do_syscall_64+0xfd/0x620 [ 1966.054489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1966.059668] RIP: 0033:0x45a639 [ 1966.062852] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1966.081840] RSP: 002b:00007fc48714c9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1966.089539] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a639 [ 1966.096808] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf447 18:21:06 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r3 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r3, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0xfffffffffffffd7b, 0x800) write$P9_RLOCK(r3, &(0x7f0000000040)={0x8, 0x35, 0x2, 0x2}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0xc1}}, 0x0) [ 1966.104080] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1966.111361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc48714d6d4 [ 1966.118765] R13: 00000000004bf447 R14: 00000000004e2670 R15: 0000000000000003 18:21:06 executing program 2 (fault-call:0 fault-nth:5): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1966.153177] overlayfs: workdir and upperdir must be separate subtrees [ 1966.182684] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1966.197599] overlayfs: workdir and upperdir must be separate subtrees [ 1966.215754] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:06 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1966.243686] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1966.279087] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1966.288404] FAULT_INJECTION: forcing a failure. 18:21:06 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x68, 0x7, 0x5a, "861db5105919cdd1fef19e8e392a6bd2", "5af36a410d0fc63316c94cba835df9bf0e1183fdc1f2f5f2188655c39cb7e25560c1d0aaa4f46df3664a406dc24076f1aea2c10ce651c755dd0b55c76d816178e028c1e3e02a5ad317ec6401ef170055b529d5"}, 0x68, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r6 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x200) r7 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r7, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r7, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000014}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r5, 0x880, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r10}, {0x8, 0x1, r1}, {0x8, 0x1, r11}, {0x8, 0x1, r2}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xcb05e80520efb344) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000440)={0x9, 0x6, 0x43, 0x8000, 0x8001}, 0x14) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) [ 1966.288404] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.303363] CPU: 1 PID: 21495 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1966.311204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.320570] Call Trace: [ 1966.323181] dump_stack+0x197/0x210 [ 1966.326839] should_fail.cold+0xa/0x1b [ 1966.330755] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1966.339875] ? lock_downgrade+0x880/0x880 [ 1966.344053] __should_failslab+0x121/0x190 [ 1966.348304] should_failslab+0x9/0x14 [ 1966.352125] kmem_cache_alloc+0x2ae/0x700 [ 1966.356300] __alloc_file+0x27/0x330 [ 1966.360033] alloc_empty_file+0x72/0x170 [ 1966.364108] alloc_file+0x5e/0x4d0 [ 1966.367662] alloc_file_pseudo+0x189/0x280 [ 1966.371917] ? alloc_file+0x4d0/0x4d0 [ 1966.377652] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1966.383217] ? kasan_check_write+0x14/0x20 [ 1966.387478] __shmem_file_setup.part.0+0x108/0x2b0 [ 1966.392441] shmem_file_setup+0x66/0x90 [ 1966.396438] __x64_sys_memfd_create+0x2a2/0x470 [ 1966.401129] ? memfd_fcntl+0x1750/0x1750 [ 1966.405209] ? do_syscall_64+0x26/0x620 [ 1966.409227] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1966.413828] ? trace_hardirqs_on+0x67/0x220 [ 1966.418176] do_syscall_64+0xfd/0x620 [ 1966.422011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1966.427215] RIP: 0033:0x45a639 [ 1966.430549] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1966.449509] RSP: 002b:00007fc48714c9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1966.457251] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a639 [ 1966.464807] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf447 [ 1966.472094] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1966.479379] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc48714d6d4 [ 1966.486667] R13: 00000000004bf447 R14: 00000000004e2670 R15: 0000000000000003 [ 1966.511570] net_ratelimit: 22 callbacks suppressed [ 1966.511579] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.521511] protocol 88fb is buggy, dev hsr_slave_0 [ 1966.521728] protocol 88fb is buggy, dev hsr_slave_1 [ 1966.526679] protocol 88fb is buggy, dev hsr_slave_1 [ 1966.537805] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:07 executing program 2 (fault-call:0 fault-nth:6): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:07 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18:21:07 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1966.604526] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:07 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1966.670386] FAULT_INJECTION: forcing a failure. [ 1966.670386] name failslab, interval 1, probability 0, space 0, times 0 [ 1966.697327] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1966.706161] CPU: 1 PID: 21509 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1966.714001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1966.723375] Call Trace: [ 1966.725991] dump_stack+0x197/0x210 [ 1966.729647] should_fail.cold+0xa/0x1b [ 1966.733538] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1966.738748] ? lock_downgrade+0x880/0x880 [ 1966.742897] __should_failslab+0x121/0x190 [ 1966.747156] should_failslab+0x9/0x14 [ 1966.750945] kmem_cache_alloc+0x2ae/0x700 [ 1966.755090] ? rcu_read_lock_sched_held+0x110/0x130 [ 1966.760103] selinux_file_alloc_security+0xb4/0x190 [ 1966.765115] security_file_alloc+0x63/0xa0 [ 1966.769343] __alloc_file+0xcf/0x330 [ 1966.773046] alloc_empty_file+0x72/0x170 [ 1966.777110] alloc_file+0x5e/0x4d0 [ 1966.780644] alloc_file_pseudo+0x189/0x280 [ 1966.784870] ? alloc_file+0x4d0/0x4d0 [ 1966.788665] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1966.794201] ? kasan_check_write+0x14/0x20 [ 1966.798428] __shmem_file_setup.part.0+0x108/0x2b0 [ 1966.803357] shmem_file_setup+0x66/0x90 [ 1966.807324] __x64_sys_memfd_create+0x2a2/0x470 [ 1966.811996] ? memfd_fcntl+0x1750/0x1750 [ 1966.816048] ? do_syscall_64+0x26/0x620 [ 1966.820023] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1966.824682] ? trace_hardirqs_on+0x67/0x220 [ 1966.829001] do_syscall_64+0xfd/0x620 [ 1966.832793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1966.837973] RIP: 0033:0x45a639 [ 1966.841184] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1966.861125] RSP: 002b:00007fc48714c9f8 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1966.868835] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a639 [ 1966.876110] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bf447 [ 1966.883371] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 0000000000000000 [ 1966.890672] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc48714d6d4 [ 1966.899079] R13: 00000000004bf447 R14: 00000000004e2670 R15: 0000000000000003 [ 1966.944248] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1966.962970] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1966.976192] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1967.026283] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1967.049398] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1967.060881] bond0 (unregistering): Released all slaves 18:21:07 executing program 2 (fault-call:0 fault-nth:7): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1967.083491] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1967.121995] FAULT_INJECTION: forcing a failure. [ 1967.121995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1967.133859] CPU: 0 PID: 21523 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1967.141671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.151042] Call Trace: [ 1967.153671] dump_stack+0x197/0x210 [ 1967.157336] should_fail.cold+0xa/0x1b [ 1967.161261] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1967.166389] ? debug_smp_processor_id+0x1c/0x20 [ 1967.171085] ? perf_trace_lock+0xeb/0x510 [ 1967.175261] ? mark_held_locks+0x100/0x100 [ 1967.179516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1967.185089] __alloc_pages_nodemask+0x1ee/0x750 [ 1967.189796] ? debug_smp_processor_id+0x1c/0x20 [ 1967.194490] ? perf_trace_lock+0xeb/0x510 [ 1967.198674] ? __alloc_pages_slowpath+0x2870/0x2870 [ 1967.203709] ? find_held_lock+0x35/0x130 [ 1967.207803] cache_grow_begin+0x91/0x8c0 [ 1967.211898] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1967.217465] kmem_cache_alloc+0x63b/0x700 [ 1967.221630] ? notify_change+0x6d5/0xfb0 [ 1967.225701] ? do_sys_ftruncate+0x41e/0x550 [ 1967.230039] getname_flags+0xd6/0x5b0 [ 1967.233869] getname+0x1a/0x20 [ 1967.237090] do_sys_open+0x2c9/0x550 [ 1967.240823] ? filp_open+0x80/0x80 [ 1967.244380] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1967.249153] ? do_syscall_64+0x26/0x620 [ 1967.253144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.258523] ? do_syscall_64+0x26/0x620 [ 1967.262519] __x64_sys_open+0x7e/0xc0 [ 1967.266337] do_syscall_64+0xfd/0x620 [ 1967.270161] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.275359] RIP: 0033:0x4143d1 [ 1967.278591] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1967.297507] RSP: 002b:00007fc48714c9f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1967.305244] RAX: ffffffffffffffda RBX: 00007fc48714d6d4 RCX: 00000000004143d1 [ 1967.312529] RDX: 00007fc48714cbaa RSI: 0000000000000002 RDI: 00007fc48714cba0 [ 1967.319816] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 1967.327106] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1967.334398] R13: 0000000000000004 R14: 00000000004e2670 R15: 0000000000000003 [ 1967.346392] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:08 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:08 executing program 2 (fault-call:0 fault-nth:8): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1967.471544] protocol 88fb is buggy, dev hsr_slave_0 [ 1967.476719] protocol 88fb is buggy, dev hsr_slave_1 [ 1967.481922] protocol 88fb is buggy, dev hsr_slave_0 [ 1967.486994] protocol 88fb is buggy, dev hsr_slave_1 18:21:08 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:08 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d04000000000000000000000000cf182a9c55d0f0446b2a3644929ae6f7b61e3ab512c3384960e77f1055e6aa2c4d19d9ab0100679813530b65b98f858af5f7ffffff000000ffff0000000000000000000000000000007a359037225f7c5e635df10199975c64080d979ba0340ac4c254cc77d0587a1f402a673206400daec42b46a558391c502753e91a097a94b67ff158785c2efd5d902a2895f2b7670600000000000000f4d214edaabf5c6bab1b616878714699ac8c8aee09af530644969cb753050000000000000031ea1a42ca1a257b3129864bb33a28a78f368d9176d4bd7d9744663ed0e2d3e57ec46a9c704791d78ce4b97c6d8a99e807d7e6a2a48c4130ae875a889a008b3bd33f897a5bb6fe0a6296c83174cb1e877290beb152f27b25a0176eb9e3e504d669d1440142f901036c7d382a849d4ae4c65b4f5a09e47dbe04330fee65e58c43c776728d6d80634bbb465a4467add422fcaf4965c1c3ad49adda0a31d0bded79982fcc42cb8faf19e8572c8186fbe99859ebd596639bdb2eeea96feb489c5a5e0a564eb2e42359a30327363de80ce839966119cf", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r4 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000000)=0x5) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @default, @bpq0='bpq0\x00', 0x7, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x80000000, 0x1, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) 18:21:08 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1967.529840] FAULT_INJECTION: forcing a failure. [ 1967.529840] name failslab, interval 1, probability 0, space 0, times 0 [ 1967.561611] CPU: 0 PID: 21532 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1967.569477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1967.578859] Call Trace: [ 1967.581464] dump_stack+0x197/0x210 [ 1967.585123] should_fail.cold+0xa/0x1b [ 1967.589042] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1967.594173] ? lock_downgrade+0x880/0x880 [ 1967.598346] __should_failslab+0x121/0x190 [ 1967.602602] should_failslab+0x9/0x14 [ 1967.613477] kmem_cache_alloc+0x2ae/0x700 [ 1967.617723] ? __save_stack_trace+0x99/0x100 [ 1967.622160] __alloc_file+0x27/0x330 [ 1967.625986] alloc_empty_file+0x72/0x170 [ 1967.630082] path_openat+0xef/0x45e0 [ 1967.633845] ? __lock_acquire+0x6ee/0x49c0 [ 1967.638108] ? getname+0x1a/0x20 [ 1967.641493] ? do_sys_open+0x2c9/0x550 [ 1967.645399] ? __x64_sys_open+0x7e/0xc0 [ 1967.649390] ? do_syscall_64+0xfd/0x620 [ 1967.653382] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.658763] ? check_preemption_disabled+0x48/0x290 [ 1967.663802] ? debug_smp_processor_id+0x1c/0x20 [ 1967.668493] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1967.673175] ? __lock_is_held+0xb6/0x140 [ 1967.677257] ? SOFTIRQ_verbose+0x10/0x10 [ 1967.681337] ? __alloc_fd+0x44d/0x560 [ 1967.685155] do_filp_open+0x1a1/0x280 [ 1967.688969] ? may_open_dev+0x100/0x100 [ 1967.692963] ? lock_downgrade+0x880/0x880 [ 1967.697129] ? do_raw_spin_unlock+0x178/0x270 [ 1967.701645] ? _raw_spin_unlock+0x2d/0x50 [ 1967.705818] ? __alloc_fd+0x44d/0x560 [ 1967.709644] do_sys_open+0x3fe/0x550 [ 1967.713473] ? filp_open+0x80/0x80 [ 1967.717032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1967.721842] ? do_syscall_64+0x26/0x620 [ 1967.725930] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.731308] ? do_syscall_64+0x26/0x620 [ 1967.735317] __x64_sys_open+0x7e/0xc0 [ 1967.739140] do_syscall_64+0xfd/0x620 [ 1967.742966] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1967.748167] RIP: 0033:0x4143d1 [ 1967.751376] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1967.771683] RSP: 002b:00007fc48714c9f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1967.779504] RAX: ffffffffffffffda RBX: 00007fc48714d6d4 RCX: 00000000004143d1 [ 1967.786796] RDX: 00007fc48714cbaa RSI: 0000000000000002 RDI: 00007fc48714cba0 [ 1967.794084] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 1967.801369] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1967.808660] R13: 0000000000000004 R14: 00000000004e2670 R15: 0000000000000003 [ 1967.841207] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1967.871894] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:08 executing program 2 (fault-call:0 fault-nth:9): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1967.929541] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1967.939994] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1967.961639] protocol 88fb is buggy, dev hsr_slave_0 [ 1967.968392] protocol 88fb is buggy, dev hsr_slave_1 18:21:08 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet(0x2, 0x4, 0x45) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) r3 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x8) ioctl$CAPI_INSTALLED(r3, 0x80024322) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011010d0500"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000af03af29b7ec22fd91ecf6aac1a3613abdcde2cce29708af355e5c8149590b40b15674f37710775e6b66f31af46f91b7aa7589514cb2a517e58a72ebaedca01837611e6a6818ea06cf1106d0fe3f6e6b37209baa8620c1"], 0x20}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$SIOCAX25NOUID(r6, 0x89e3, &(0x7f00000000c0)=0x1) [ 1967.995635] FAULT_INJECTION: forcing a failure. [ 1967.995635] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.013326] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1968.026317] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1968.079353] CPU: 1 PID: 21548 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1968.087212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.096587] Call Trace: [ 1968.099204] dump_stack+0x197/0x210 [ 1968.102864] should_fail.cold+0xa/0x1b [ 1968.106783] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1968.112369] ? lock_downgrade+0x880/0x880 [ 1968.116564] __should_failslab+0x121/0x190 [ 1968.120814] should_failslab+0x9/0x14 [ 1968.124626] kmem_cache_alloc+0x2ae/0x700 [ 1968.128789] ? rcu_read_lock_sched_held+0x110/0x130 [ 1968.133816] selinux_file_alloc_security+0xb4/0x190 [ 1968.138827] security_file_alloc+0x63/0xa0 [ 1968.143057] __alloc_file+0xcf/0x330 [ 1968.146772] alloc_empty_file+0x72/0x170 [ 1968.150835] path_openat+0xef/0x45e0 [ 1968.154552] ? __lock_acquire+0x6ee/0x49c0 [ 1968.158784] ? getname+0x1a/0x20 [ 1968.162156] ? do_sys_open+0x2c9/0x550 [ 1968.166034] ? __x64_sys_open+0x7e/0xc0 [ 1968.169997] ? do_syscall_64+0xfd/0x620 [ 1968.173972] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.179416] ? check_preemption_disabled+0x48/0x290 [ 1968.184431] ? debug_smp_processor_id+0x1c/0x20 [ 1968.189098] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1968.193757] ? __lock_is_held+0xb6/0x140 [ 1968.197816] ? SOFTIRQ_verbose+0x10/0x10 [ 1968.201869] ? __alloc_fd+0x44d/0x560 [ 1968.205661] do_filp_open+0x1a1/0x280 [ 1968.209455] ? may_open_dev+0x100/0x100 [ 1968.213420] ? lock_downgrade+0x880/0x880 [ 1968.217577] ? do_raw_spin_unlock+0x178/0x270 [ 1968.222062] ? _raw_spin_unlock+0x2d/0x50 [ 1968.226201] ? __alloc_fd+0x44d/0x560 [ 1968.230002] do_sys_open+0x3fe/0x550 [ 1968.233710] ? filp_open+0x80/0x80 [ 1968.237245] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1968.241990] ? do_syscall_64+0x26/0x620 [ 1968.245986] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.251358] ? do_syscall_64+0x26/0x620 [ 1968.255353] __x64_sys_open+0x7e/0xc0 [ 1968.259175] do_syscall_64+0xfd/0x620 [ 1968.263004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.268191] RIP: 0033:0x4143d1 [ 1968.271380] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1968.290287] RSP: 002b:00007fc48714c9f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1968.297991] RAX: ffffffffffffffda RBX: 00007fc48714d6d4 RCX: 00000000004143d1 [ 1968.305261] RDX: 00007fc48714cbaa RSI: 0000000000000002 RDI: 00007fc48714cba0 [ 1968.312524] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 1968.319793] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 18:21:09 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1968.327062] R13: 0000000000000004 R14: 00000000004e2670 R15: 0000000000000003 [ 1968.341624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=273 sclass=netlink_route_socket pig=21553 comm=syz-executor.3 18:21:09 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:09 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1968.448961] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1968.487354] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:09 executing program 2 (fault-call:0 fault-nth:10): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1968.610959] FAULT_INJECTION: forcing a failure. [ 1968.610959] name failslab, interval 1, probability 0, space 0, times 0 [ 1968.640701] CPU: 0 PID: 21571 Comm: syz-executor.2 Not tainted 4.19.85-syzkaller #0 [ 1968.648558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1968.657927] Call Trace: [ 1968.660540] dump_stack+0x197/0x210 [ 1968.664197] should_fail.cold+0xa/0x1b [ 1968.668121] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1968.673348] ? lock_downgrade+0x880/0x880 [ 1968.677550] __should_failslab+0x121/0x190 [ 1968.681813] should_failslab+0x9/0x14 [ 1968.685631] kmem_cache_alloc+0x2ae/0x700 [ 1968.689805] ? rcu_read_lock_sched_held+0x110/0x130 [ 1968.694843] selinux_file_alloc_security+0xb4/0x190 [ 1968.699900] security_file_alloc+0x63/0xa0 [ 1968.704151] __alloc_file+0xcf/0x330 [ 1968.707892] alloc_empty_file+0x72/0x170 [ 1968.711975] path_openat+0xef/0x45e0 [ 1968.715725] ? __lock_acquire+0x6ee/0x49c0 [ 1968.719974] ? getname+0x1a/0x20 [ 1968.723349] ? do_sys_open+0x2c9/0x550 [ 1968.727248] ? __x64_sys_open+0x7e/0xc0 [ 1968.731234] ? do_syscall_64+0xfd/0x620 [ 1968.735227] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.740621] ? check_preemption_disabled+0x48/0x290 [ 1968.745701] ? debug_smp_processor_id+0x1c/0x20 [ 1968.750388] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 1968.755077] ? __lock_is_held+0xb6/0x140 [ 1968.759159] ? SOFTIRQ_verbose+0x10/0x10 [ 1968.763326] ? __alloc_fd+0x44d/0x560 [ 1968.767147] do_filp_open+0x1a1/0x280 [ 1968.771006] ? may_open_dev+0x100/0x100 [ 1968.774998] ? lock_downgrade+0x880/0x880 [ 1968.779173] ? do_raw_spin_unlock+0x178/0x270 [ 1968.783682] ? _raw_spin_unlock+0x2d/0x50 [ 1968.787846] ? __alloc_fd+0x44d/0x560 [ 1968.791690] do_sys_open+0x3fe/0x550 [ 1968.795419] ? filp_open+0x80/0x80 [ 1968.798983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1968.803756] ? do_syscall_64+0x26/0x620 [ 1968.807744] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.813123] ? do_syscall_64+0x26/0x620 [ 1968.817150] __x64_sys_open+0x7e/0xc0 [ 1968.820972] do_syscall_64+0xfd/0x620 [ 1968.824794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1968.829990] RIP: 0033:0x4143d1 [ 1968.833189] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1968.852106] RSP: 002b:00007fc48714c9f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 18:21:09 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1968.859843] RAX: ffffffffffffffda RBX: 00007fc48714d6d4 RCX: 00000000004143d1 [ 1968.867136] RDX: 00007fc48714cbaa RSI: 0000000000000002 RDI: 00007fc48714cba0 [ 1968.874446] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 1968.881739] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 1968.889023] R13: 0000000000000004 R14: 00000000004e2670 R15: 0000000000000003 [ 1968.917008] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1968.952460] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1968.977813] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1969.007445] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:09 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000002c0)={0x2, 0xfe, "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"}) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 1969.035985] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1969.038743] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:09 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:09 executing program 2 (fault-call:0 fault-nth:11): syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:09 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1969.222758] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1969.276171] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:10 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:10 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1969.453309] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1969.469015] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1969.488984] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:10 executing program 2: syz_read_part_table(0x2, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1969.521103] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:10 executing program 2: syz_read_part_table(0x3, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1969.580816] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:10 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1969.665595] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:10 executing program 2: syz_read_part_table(0x4, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1969.808508] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1969.833201] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1969.866046] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1969.886705] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1969.889205] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:10 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r4 = accept4(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) r5 = socket(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r5, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r7}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)={r7, 0x0, 0x7, [0x5, 0x81, 0xd3, 0x9, 0x4, 0x2, 0xdd51]}, 0x16) 18:21:10 executing program 2: syz_read_part_table(0x5, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1969.923561] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:10 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:10 executing program 2: syz_read_part_table(0x6, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:10 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1970.160045] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1970.165390] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1970.171153] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1970.192316] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:10 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) creat(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:10 executing program 2: syz_read_part_table(0x300, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:10 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x5a91d631c85854f1, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x8}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x810) [ 1970.236050] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1970.261244] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:11 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x38, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_CARRIER={0x8, 0x21, 0x80}, @IFLA_PROTO_DOWN={0x8, 0x27, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0xb8e0739b1e322507}, 0x4) 18:21:11 executing program 2: syz_read_part_table(0x480, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:11 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:11 executing program 2: syz_read_part_table(0x500, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1970.465602] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 1970.482054] netlink: 'syz-executor.3': attribute type 39 has an invalid length. 18:21:11 executing program 2: syz_read_part_table(0x600, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1970.569188] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1970.605229] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:11 executing program 2: syz_read_part_table(0x8004, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1970.611111] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1970.641575] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1970.660241] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:11 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1970.699199] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:11 executing program 2: syz_read_part_table(0x6b6b6b, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1970.851218] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1970.875132] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:11 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20430004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:11 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:11 executing program 2: syz_read_part_table(0x1000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1971.297508] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1971.312485] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1971.322265] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1971.344439] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1971.346455] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 1971.365145] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 1971.391588] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 1971.407878] netlink: 'syz-executor.3': attribute type 39 has an invalid length. 18:21:12 executing program 2: syz_read_part_table(0x2000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:12 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:12 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xffffffffffffff10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00e\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1971.602715] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1971.631525] net_ratelimit: 18 callbacks suppressed [ 1971.631535] protocol 88fb is buggy, dev hsr_slave_0 [ 1971.641703] protocol 88fb is buggy, dev hsr_slave_1 [ 1971.646866] protocol 88fb is buggy, dev hsr_slave_0 18:21:12 executing program 2: syz_read_part_table(0x3000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1971.652196] protocol 88fb is buggy, dev hsr_slave_1 [ 1971.691355] overlayfs: filesystem on './bus' not supported as upperdir [ 1971.703782] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:12 executing program 2: syz_read_part_table(0x4000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1971.748959] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1971.764439] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1971.771561] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1971.824636] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:12 executing program 2: syz_read_part_table(0x5000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:12 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:12 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:12 executing program 2: syz_read_part_table(0x6000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1972.034979] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1972.111571] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.116749] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.159286] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:12 executing program 2: syz_read_part_table(0x6b6b6b00, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1972.205317] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:12 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x9, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1972.251672] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1972.274267] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1972.321072] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:13 executing program 2: syz_read_part_table(0x80040000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1972.384241] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1972.431564] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.436740] protocol 88fb is buggy, dev hsr_slave_1 [ 1972.454482] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:13 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:13 executing program 2: syz_read_part_table(0xf6ffffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:13 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000002c0)=""/145) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x3, 0x1, 0x5, 0x5, 0xbea5196, 0xaaaa}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0xa}}, 0x0) [ 1972.703427] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1972.725073] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:13 executing program 2: syz_read_part_table(0xfcfdffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1972.747508] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1972.748712] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1972.756699] protocol 88fb is buggy, dev hsr_slave_0 [ 1972.756723] protocol 88fb is buggy, dev hsr_slave_0 18:21:13 executing program 2: syz_read_part_table(0xfeffffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1972.803633] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:13 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1972.870062] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:13 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:13 executing program 2: syz_read_part_table(0xfffffdfc, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1973.097807] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1973.119853] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1973.135981] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:13 executing program 2: syz_read_part_table(0xfffffff6, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1973.175993] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1973.195665] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:13 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1973.218651] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:13 executing program 2: syz_read_part_table(0xfffffffe, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:14 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:14 executing program 2: syz_read_part_table(0x1000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1973.403718] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1973.451784] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:14 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$alg(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32, @ANYBLOB="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"], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0x7}, 0x7) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000000)={0x9, 0x3000}) r5 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="711e9a09947b"], 0x20}}, 0x0) r8 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r8, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r8, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x6f, 0x800) write$P9_RREADDIR(r8, &(0x7f0000000040)={0x49, 0x29, 0x2, {0x100, [{{0x6, 0x3}, 0x1, 0x40, 0x7, './file0'}, {{0x20, 0x1, 0x4}, 0x6, 0x0, 0x7, './file0'}]}}, 0x49) r9 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 18:21:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1973.618913] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1973.666274] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1973.726926] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1973.756521] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:14 executing program 2: syz_read_part_table(0x6b6b6b00000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:14 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1973.781191] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1973.831314] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:14 executing program 2: syz_read_part_table(0x100000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:14 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:14 executing program 0: pipe(&(0x7f0000000100)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:14 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x22, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:14 executing program 2: syz_read_part_table(0x200000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:14 executing program 2: syz_read_part_table(0x300000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1974.225431] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1974.290075] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1974.342085] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1974.383293] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:15 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xb2) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:21:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2c, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:15 executing program 2: syz_read_part_table(0x400000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:15 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:15 executing program 2: syz_read_part_table(0x500000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x58, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 1974.754396] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1974.771676] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:15 executing program 2: syz_read_part_table(0x600000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1974.826267] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) [ 1974.881612] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1974.896178] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:15 executing program 2: syz_read_part_table(0x8004000000000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1974.956314] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:16 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x2600, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f00000001c0), &(0x7f0000000240)=0x4) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) timer_create(0x4, &(0x7f0000000080)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000000)="157ea784dcf9fae8ad341f67acea7d7da911b7718507cdecf3be1302e2e679b5a8d365aa03844c05e0b54ddab7ef483f6634cb05dad65af2c4e5c3d47e5d6d98b89c142393be56c8e68154", &(0x7f00000002c0)="125650eed3cf48a3e92646f7dee1943e2292d1054b7d0bc75c309d7b286e19febdaa79abf11946c69a1475df91e0dfd2e76d95c3515a83898cb75ed6c0d9d8e721120fbc56d2797b1af531f02f1d8f0a792c67fd22d4d6a9b1552785e18ce9a09518b1a9b804c4d9e1066c9756874c9e5a3806dcebdb5fbf4dbb675d4c56bc78acf99aea334a7ddafaa5e96c4dd0201c023c2b675fd7b5052e4b2e2d64b3bf90981521b7e8aa5e50af19c980585b65c10ad6507ba5c9cb2c09c8b51cc5141b192cdff73b6d11a67a"}}, &(0x7f00000000c0)=0x0) timer_delete(r3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) 18:21:16 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:16 executing program 2: syz_read_part_table(0xf6ffffff00000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:21:16 executing program 2: syz_read_part_table(0xfcfdffff00000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1975.605369] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) [ 1975.710674] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1975.738221] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:16 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 1975.758484] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:16 executing program 2: syz_read_part_table(0xfeffffff00000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1975.808198] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1975.852442] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 18:21:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x60, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:16 executing program 2: syz_read_part_table(0xffffffff00000000, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:16 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:21:16 executing program 2: syz_read_part_table(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 18:21:16 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) [ 1976.312501] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:17 executing program 2: syz_read_part_table(0x0, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1976.352785] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1976.381608] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1976.451068] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:17 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x7f', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:17 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r2 = accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000004c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2}) sendto(r2, &(0x7f0000000040)="c3d4103944b3c61ee8f294ff4e27ef4a558fe4e1009e33a248eb19e6cd9961fa8537dc4e93e865a8f8d5a761a5667b718c67c4ad4427243775be4a943b1506d16512fbd20d7c7ade7a219fdaa7f1803703eb796883b172abb76774bc769012478dad492943", 0x65, 0x4000000, &(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x4, 0x1}}, 0x80) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6, @ANYBLOB="0000002000000000b46f4544e36115829192a23d91eaee108afbc2cbfa1a489cb4f446ce494d6987bc06e6b60f18da9458389eab6c9d54171128af310341032d13fa0e90bec530ac39417cebc61d8d6a0e7cbd0e4417034498de50083a277d0b8075989a8de36c2169ea9e73df0daf2824cbc1a3fb003cf6bee06876d35c93645a455a968e93710c277cab40c5ae4d5cb964898b7515"], 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r8, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r9 = accept4(r8, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r9, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) sendto$ax25(r9, &(0x7f0000000500)="7be7b4233e67d549bebd6e12cfa0fcf6f16b262a4456d2aa9a30f3dbea414b45b17f4e6fbd840398ce4858efe4524949d7e95e012a275e50b94c50afac9cb4aa5be32d1cd28ef7f41b116f", 0x4b, 0x4040000, &(0x7f0000000580)={{0x3, @default}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) getsockname$unix(r7, &(0x7f0000000340), &(0x7f0000000240)=0x6e) 18:21:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x122, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:17 executing program 2: syz_read_part_table(0x0, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:17 executing program 2: syz_read_part_table(0x0, 0x4, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:17 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x148, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1976.911511] net_ratelimit: 22 callbacks suppressed [ 1976.911520] protocol 88fb is buggy, dev hsr_slave_0 [ 1976.911552] protocol 88fb is buggy, dev hsr_slave_1 [ 1976.916601] protocol 88fb is buggy, dev hsr_slave_1 18:21:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:17 executing program 2: syz_read_part_table(0x0, 0x5, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:17 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\xff', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:17 executing program 2: syz_read_part_table(0x0, 0x6, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x0, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1977.068263] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1977.124774] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x0, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:18 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0xc04, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x40000}}, 0x20}}, 0x0) 18:21:18 executing program 2: syz_read_part_table(0x0, 0x300, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x16f, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x0, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:18 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:18 executing program 2: syz_read_part_table(0x0, 0x480, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1b0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:18 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/65, 0x41}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:21:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1977.871524] protocol 88fb is buggy, dev hsr_slave_0 [ 1977.876677] protocol 88fb is buggy, dev hsr_slave_1 [ 1977.881880] protocol 88fb is buggy, dev hsr_slave_0 [ 1977.886959] protocol 88fb is buggy, dev hsr_slave_1 18:21:18 executing program 2: syz_read_part_table(0x0, 0x500, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1977.973681] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:18 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000000)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) fremovexattr(r4, &(0x7f0000000040)=@known='com.apple.system.Security\x00') 18:21:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1978.025295] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:18 executing program 2: syz_read_part_table(0x0, 0x600, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1978.071267] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:18 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1d4, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1978.136924] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 18:21:18 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:18 executing program 2: syz_read_part_table(0x0, 0x8004, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1978.269933] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) [ 1978.351559] protocol 88fb is buggy, dev hsr_slave_0 [ 1978.356721] protocol 88fb is buggy, dev hsr_slave_1 18:21:19 executing program 2: syz_read_part_table(0x0, 0x6b6b6b, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1978.389772] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 18:21:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x24b, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x0, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1978.525439] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1978.562305] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1978.595224] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1978.639390] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1978.671515] protocol 88fb is buggy, dev hsr_slave_0 [ 1978.684338] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1978.737324] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:19 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getitimer(0x2, &(0x7f0000000040)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="45184000f0ff00010000000000000000200000006900000085100000faffffff180000000700000000000000ff7f0000850000005a00000018000000000000000000dc7d344adb2500002a0c0000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], r7, 0x7, r2, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x8001, 0x4}, 0x10}, 0x70) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) futex(&(0x7f00000003c0)=0x1, 0x81, 0x0, &(0x7f0000000440)={r11, r12+10000000}, &(0x7f0000000480)=0x1, 0x1) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="63d300"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000540)=&(0x7f00000004c0)) 18:21:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x266, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:19 executing program 2: syz_read_part_table(0x0, 0x1000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x0, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:19 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x0, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:19 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x300, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1979.200334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22082 comm=syz-executor.3 18:21:19 executing program 2: syz_read_part_table(0x0, 0x2000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1979.252975] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1979.301775] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:20 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:20 executing program 2: syz_read_part_table(0x0, 0x3000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1979.347304] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1979.365438] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1979.388718] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1979.419203] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1979.480480] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:20 executing program 2: syz_read_part_table(0x0, 0x4000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:20 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1979.521127] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1979.560846] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1979.612530] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1979.715671] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1979.726042] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1979.746766] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1979.785903] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:20 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r3, @ANYBLOB="0000000000792c9485ba6f54cbb278397c39a9f9000000"], 0x20}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000340)=0xc) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000400)=r6) r7 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r7, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r8 = accept4(r7, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r8, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x0, @local, 0xfffffffe}}, 0x400, 0x2}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r9, 0x7f, 0x30, 0x401, 0x1}, &(0x7f00000001c0)=0x18) 18:21:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x364, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:20 executing program 2: syz_read_part_table(0x0, 0x5000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:20 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:20 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:20 executing program 2: syz_read_part_table(0x0, 0x6000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x500, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:20 executing program 2: syz_read_part_table(0x0, 0x6b6b6b00, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1980.117253] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1980.127993] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1980.143431] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:20 executing program 2: syz_read_part_table(0x0, 0x80040000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1980.171038] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1980.195614] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1980.211264] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1980.238426] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 1980.239442] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1980.266309] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:20 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x600, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1980.275227] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:21 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:21 executing program 2: syz_read_part_table(0x0, 0xf6ffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1980.424144] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1980.448857] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1980.541157] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:21 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x20}}, 0x0) 18:21:21 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:21 executing program 2: syz_read_part_table(0x0, 0xfcfdffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x700, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:21 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:21 executing program 2: syz_read_part_table(0x0, 0xfeffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1980.933558] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1980.938916] FAULT_INJECTION: forcing a failure. [ 1980.938916] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.993735] CPU: 1 PID: 22166 Comm: syz-executor.0 Not tainted 4.19.85-syzkaller #0 [ 1981.001802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.011276] Call Trace: [ 1981.013660] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1981.013892] dump_stack+0x197/0x210 [ 1981.013914] should_fail.cold+0xa/0x1b [ 1981.013932] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1981.040237] ? lock_downgrade+0x880/0x880 [ 1981.044421] __should_failslab+0x121/0x190 [ 1981.048788] should_failslab+0x9/0x14 [ 1981.052615] kmem_cache_alloc_node+0x26c/0x710 [ 1981.057230] __alloc_skb+0xd5/0x5f0 [ 1981.060980] ? skb_scrub_packet+0x490/0x490 [ 1981.065445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.071006] ? netlink_autobind.isra.0+0x228/0x310 [ 1981.076127] netlink_sendmsg+0x97b/0xd70 [ 1981.080235] ? netlink_unicast+0x720/0x720 [ 1981.084504] ? selinux_socket_sendmsg+0x36/0x40 [ 1981.089196] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.095125] ? security_socket_sendmsg+0x8d/0xc0 [ 1981.100017] ? netlink_unicast+0x720/0x720 [ 1981.104387] sock_sendmsg+0xd7/0x130 [ 1981.108217] ___sys_sendmsg+0x803/0x920 [ 1981.112228] ? copy_msghdr_from_user+0x430/0x430 [ 1981.117106] ? lock_downgrade+0x880/0x880 [ 1981.121279] ? kasan_check_read+0x11/0x20 [ 1981.125765] ? __fget+0x367/0x540 [ 1981.129243] ? iterate_fd+0x360/0x360 [ 1981.133076] ? __fget_light+0x1a9/0x230 [ 1981.137074] ? __fdget+0x1b/0x20 18:21:21 executing program 2: syz_read_part_table(0x0, 0xfffffdfc, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x900, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1981.140464] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1981.146048] __sys_sendmsg+0x105/0x1d0 [ 1981.149958] ? __ia32_sys_shutdown+0x80/0x80 [ 1981.154574] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1981.159452] ? do_syscall_64+0x26/0x620 [ 1981.163452] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.168844] ? do_syscall_64+0x26/0x620 [ 1981.172854] __x64_sys_sendmsg+0x78/0xb0 [ 1981.176948] do_syscall_64+0xfd/0x620 [ 1981.180784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.186130] RIP: 0033:0x45a639 [ 1981.189445] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1981.209032] RSP: 002b:00007f803b6ebc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1981.217326] RAX: ffffffffffffffda RBX: 00007f803b6ebc90 RCX: 000000000045a639 [ 1981.224942] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1981.232323] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1981.239867] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f803b6ec6d4 [ 1981.247299] R13: 00000000004c8d4d R14: 00000000004df5b0 R15: 0000000000000004 [ 1981.266785] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:22 executing program 2: syz_read_part_table(0x0, 0xfffffff6, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1981.306748] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:22 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:22 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) fstatfs(r0, &(0x7f0000000540)=""/4096) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011ff7f0000000000000000000000ef003c0787189fa3d7db4ae08c6696ec58bf426c9ab3b7d830f335", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1981.377612] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1981.388793] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1981.408241] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65297 sclass=netlink_route_socket pig=22184 comm=syz-executor.3 18:21:22 executing program 2: syz_read_part_table(0x0, 0xfffffffe, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1981.428706] FAULT_INJECTION: forcing a failure. [ 1981.428706] name failslab, interval 1, probability 0, space 0, times 0 [ 1981.450964] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1981.471031] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1981.486840] CPU: 1 PID: 22186 Comm: syz-executor.0 Not tainted 4.19.85-syzkaller #0 [ 1981.494784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1981.504559] Call Trace: [ 1981.507179] dump_stack+0x197/0x210 [ 1981.510854] should_fail.cold+0xa/0x1b [ 1981.514777] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1981.520723] ? lock_downgrade+0x880/0x880 [ 1981.524912] __should_failslab+0x121/0x190 [ 1981.529177] should_failslab+0x9/0x14 [ 1981.533004] kmem_cache_alloc_node_trace+0x274/0x720 [ 1981.538140] ? __alloc_skb+0xd5/0x5f0 [ 1981.541980] __kmalloc_node_track_caller+0x3d/0x80 [ 1981.547171] __kmalloc_reserve.isra.0+0x40/0xf0 [ 1981.552007] __alloc_skb+0x10b/0x5f0 [ 1981.555862] ? skb_scrub_packet+0x490/0x490 [ 1981.560474] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.566176] ? netlink_autobind.isra.0+0x228/0x310 [ 1981.571320] netlink_sendmsg+0x97b/0xd70 [ 1981.575566] ? netlink_unicast+0x720/0x720 [ 1981.579936] ? selinux_socket_sendmsg+0x36/0x40 [ 1981.584614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1981.590328] ? security_socket_sendmsg+0x8d/0xc0 [ 1981.595197] ? netlink_unicast+0x720/0x720 [ 1981.599567] sock_sendmsg+0xd7/0x130 [ 1981.603403] ___sys_sendmsg+0x803/0x920 [ 1981.607825] ? copy_msghdr_from_user+0x430/0x430 [ 1981.612889] ? lock_downgrade+0x880/0x880 [ 1981.617044] ? kasan_check_read+0x11/0x20 [ 1981.621373] ? __fget+0x367/0x540 [ 1981.624840] ? iterate_fd+0x360/0x360 [ 1981.628645] ? __fget_light+0x1a9/0x230 [ 1981.632644] ? __fdget+0x1b/0x20 [ 1981.636065] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1981.641608] __sys_sendmsg+0x105/0x1d0 [ 1981.645500] ? __ia32_sys_shutdown+0x80/0x80 [ 1981.650028] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1981.654873] ? do_syscall_64+0x26/0x620 [ 1981.658929] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.664388] ? do_syscall_64+0x26/0x620 [ 1981.668485] __x64_sys_sendmsg+0x78/0xb0 [ 1981.672683] do_syscall_64+0xfd/0x620 [ 1981.676485] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1981.681676] RIP: 0033:0x45a639 [ 1981.684866] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1981.703903] RSP: 002b:00007f803b6ebc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1981.711615] RAX: ffffffffffffffda RBX: 00007f803b6ebc90 RCX: 000000000045a639 [ 1981.719109] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1981.726537] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1981.733811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f803b6ec6d4 [ 1981.741517] R13: 00000000004c8d4d R14: 00000000004df5b0 R15: 0000000000000004 18:21:22 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:22 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = semget$private(0x0, 0x20000000102, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:usr_t:s0\x00', 0x1b, 0x0) semop(r2, &(0x7f0000000080)=[{0x1}, {0x0, 0xffffffff}], 0x2) semop(r2, &(0x7f00000000c0)=[{0x0, 0x6}], 0x1) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000540)=""/4096) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:21:22 executing program 2: syz_read_part_table(0x0, 0x1000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1981.880920] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1981.917286] audit: type=1400 audit(1574533282.588:7903): avc: denied { relabelto } for pid=22198 comm="syz-executor.3" name="NETLINK" dev="sockfs" ino=255766 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=netlink_route_socket permissive=1 18:21:22 executing program 2: syz_read_part_table(0x0, 0x6b6b6b00000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1981.995449] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1982.031526] net_ratelimit: 15 callbacks suppressed [ 1982.031533] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.041722] protocol 88fb is buggy, dev hsr_slave_1 [ 1982.047027] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.052288] protocol 88fb is buggy, dev hsr_slave_1 [ 1982.081909] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:22 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x0) 18:21:22 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1982.114743] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:22 executing program 2: syz_read_part_table(0x0, 0x100000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1982.186608] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1982.235326] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:22 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000240)=0x40) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000000000)=""/127) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x604402, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r5, 0xc008ae05, &(0x7f0000000180)=""/114) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000002c0)=0xac25f7953cebcbba, 0x4) 18:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:23 executing program 2: syz_read_part_table(0x0, 0x200000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:23 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x9, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1982.393844] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1982.464316] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:23 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x81) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000046b454bf00329b92ca4b0d813073f64421af28027f31d562cfef7cd1130000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000040)={0x0, 0x4ffa, 0x2, &(0x7f0000000000)=0x4e}) r4 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r5 = accept4(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) 18:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1982.511539] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.516724] protocol 88fb is buggy, dev hsr_slave_1 18:21:23 executing program 2: syz_read_part_table(0x0, 0x300000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1982.550594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22237 comm=syz-executor.3 18:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1982.689286] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:23 executing program 2: syz_read_part_table(0x0, 0x400000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1982.737305] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1982.798848] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1982.811023] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1982.831518] protocol 88fb is buggy, dev hsr_slave_0 [ 1982.836883] protocol 88fb is buggy, dev hsr_slave_1 [ 1982.848287] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:23 executing program 2: syz_read_part_table(0x0, 0x500000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1982.889272] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:23 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:23 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:23 executing program 2: syz_read_part_table(0x0, 0x600000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1983.151527] protocol 88fb is buggy, dev hsr_slave_0 [ 1983.156722] protocol 88fb is buggy, dev hsr_slave_1 [ 1983.175843] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1983.216227] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1983.232264] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1983.251571] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1983.286321] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1983.314458] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1983.353824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22237 comm=syz-executor.3 18:21:24 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r4 = accept4(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @mcast1, 0xffff}, 0x1c) 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x716, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:24 executing program 2: syz_read_part_table(0x0, 0x8004000000000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:24 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:24 executing program 2: syz_read_part_table(0x0, 0xf6ffffff00000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2200, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:24 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) r0 = getpid() r1 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000080)=@isdn={0x22, 0x7, 0x1, 0x6, 0x5}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="53b0e0b5b0ef5d1a06f5e0cfd1c55baefb5e34a2959efd121eceaa545537c1c00546a24ba29056415e9f92169633a11a9ca24117ffe63ce8b4cad52e315e4f7b72342acb883fb1a2d0a55e7f934f9951516e4114623b48bb8e6dd6257b075ad61794283d3f6df9cafaa4488bc3d535aaf21632cf2851f9ebe4eee7c4f861f32a7891d23368ee65fe723c2333b5143c", 0x8f}, {&(0x7f0000000380)="84c691e0b3250a91e6d960c97ca75a84ebeb933d63e1c5971753b5a5a952b9faafe6d99a668d7a3c8edabdb8f94673a3b8a7056786843b491e1f063de070b0fd2ca9321a311e8b6b9d290a4e8bffd5f7b66d6dc9bc93a806431899a9663d3c1c18efffa75687840867bd35c45fcac496db0d04c3cbcb4f5862e386a9a4363cfe162af580c64fd63e2ec1618a45f569cc1f3cb20840d05cf3ebea248c45acd9c1cdbcfa106a7c3fa4575477e220b4e4e1b6766be49eae476a052bb36286ef6d1d878d8db11c4eb2c3407ff562d5969b748d9e385938f6de9762871fe1ed9a5c1dbd1d89f7a742b7f1c4eda69e0af007a7b9baad641edf1573", 0xf8}], 0x2, &(0x7f0000000540)=[{0x90, 0x118, 0x7, "8624e054dc62de2a5c6afd116cd76f8a681c93cae959b1574f8412b30debee624e39c21fe9d39c2b7956a866142ce425bcb3007b6632a6eb2908333401ecbf3572fb57509b089f4ba8ebab9950e15d28a23aee860e36369b516dc153a16e6c0883e5982b15d80720b14f15ffb79aa6b6c6c299c624d0f8435deced1d"}, {0x1010, 0x10b, 0x9, "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"}, {0x110, 0x10a, 0xff, "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"}, {0xb8, 0x116, 0x6d6, "db508b10b6ce62d3f79901d88d210f3d92e4fe42c9bdb0c285c021faa28e7ceb0dd3cf18630ea9efd99bae00ee0497ea00d146e34111106b54b0d494efa2ad8e044370ac231cafe88c2a87c2f6daf1246b40853e4fdef755927b795daf437d0aa8a68813036baf38f39bd11a7c8b1fa89e4aafb0281310c0b39f21f1f42c171eb5905ea07b2c4cd78aebabc8392bf155c6351c738a9d486b949017a9f5f5db38ada4d1c87a626e93"}, {0x20, 0x0, 0x3, "ed175719dd5f142eeb4cbf"}, {0xe0, 0x113, 0x6, "a30e6d934d3bc350b0e89515e7ccf31cdece7dd740a52241f84132c62a5dc09555a6cc39a3169a6d696ab50e4c1e1aa06a4d6a8fdfe2d120bf08111843b80bda4f940c04bdffd793e83bffcf7198d87a815101e34d7bf55d5c63442c72b0d42cfe69122fb887496aea1548875e0244c57d61d97463b454c560720301d1765575d61e91ff1ddf9187ed0b538317d1209284d1a86231d84a3bd4338da142ebae408fce95745a0c343a9bab7c2d0aff0ad2e59015d517472753d7a5fc952a57a290e8e528cf7f735b642b6f2118e7"}, {0x68, 0x6, 0x0, "dd3c3e446584891c9e0cc34770aeeb1b0f805190d20724254506366799905b5209ca911e0e40c819ed1a5ea4ed9472f1db90d45bbeb6044b658142f9299f07ec095416ad7be06685c3fc0e31e25be825c93a6ba1"}, {0xa8, 0x10c, 0x2, "611ad3d506a50336e1a6f5b7750b1d0003f8cc4c695989cfe3bc681f0ea7fdb814fbd19fb45a028b89c43905a3a13b9e49ebbc373819d600a5742770c4b74c7ec283144e8036f74ed4d7b8f027f74ae80725b2cc5ebf191bfd19961c4e463ce5ccff3a633d966439e533f38a1ed381f053e888ceb931cf6a009c70c64fef9017e9891f476f7b949118a9f9ac813e15c31cdf1153"}], 0x1478}, 0x4000) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$getenv(0x4201, r0, 0x1, &(0x7f0000000000)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1983.599576] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1983.630021] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1983.691912] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:24 executing program 2: syz_read_part_table(0x0, 0xfcfdffff00000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1607, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2201, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1983.748933] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:24 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:24 executing program 2: syz_read_part_table(0x0, 0xfeffffff00000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:24 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0x18, 0x3, 0x15, 0x12, 0xb, 0x0, 0x0, 0x1b, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xc00e, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:24 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2c00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:24 executing program 2: syz_read_part_table(0x0, 0xffffffff00000000, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:24 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet_sctp(0x2, 0x5, 0x84) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) clock_adjtime(0x0, &(0x7f0000000000)={0x6, 0x100000001, 0x3, 0x9, 0x5, 0x3f, 0x0, 0x7fffffff, 0x0, 0x9, 0xffffffffffff4a09, 0x4, 0x5, 0x80000001, 0x3, 0x3, 0x2, 0x1, 0x3, 0x0, 0x3ff, 0x0, 0x4, 0x3ff, 0xbb31, 0xf6b9}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/4096) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1984.053281] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1984.077756] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1984.088546] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:24 executing program 2: syz_read_part_table(0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1984.150025] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:24 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) socket$isdn(0x22, 0x3, 0x2) 18:21:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:25 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x23, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf0ffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:25 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$ax25(r1, &(0x7f00000002c0)=""/182, 0xb6, 0x20, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) r8 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r8, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r8, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r9 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r9, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r9, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRES64=r3, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYBLOB="1d3bdd29c41255ed457f9ccb5e0853b07af1b49de65d335375549cbce9bc0ac34bfdaf3b2c7d06ffc7c9b8e18ee2352402d9b291b77f6a81dff350892592c9a7cbc0c089d8e687b1d4f1ef77a155b8d5390a07476987a69d96335029737b514613cfa0445bdb7ec499603b81c92625ed8076f616acfa05b348edbac12eb507dd020e745178863b2fc8c2651a051424f6d40843c090efeac585b21719f8087ee6685aec6415556b33a383b84e80e3", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64=r3, @ANYBLOB="43eefd7200037b162a21752adf3867655d3d791507f12f692903004dd5dec00565aad95a0f3d34587bebd2041716cdba88c015eaf22ee5f8306f58b27939b8d638641bce0eef9db7251008add722080720c798790f7d82ed9835bacc8f2b3b8d47507330b89c1786521f626208b6f6f4c6fc74", @ANYRES64=r0, @ANYRES16=r6, @ANYPTR], @ANYRES32=r7], @ANYRES64, @ANYRESOCT=r8, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRESOCT=r9]], 0x9}}, 0x800) r10 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r10, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r10, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) sendfile(r2, r10, &(0x7f00000000c0)=0x7, 0x6) 18:21:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1984.504803] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1984.527905] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1984.538916] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1984.570473] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1984.616790] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1984.640632] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4801, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x16070000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1984.837140] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1984.864724] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:25 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4b02, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:25 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2c, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x9effffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:25 executing program 2: syz_read_part_table(0x0, 0xfffffca9, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0), 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r4, 0x1000}, &(0x7f00000000c0)=0x8) 18:21:25 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000004c0)={0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000500)={0x0, 0x40000, r3}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000580)={r2, r4, 0x7f}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000440)=0x401, 0x8) fchdir(r0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@pppoe, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000000300)=""/90, 0x5a}, {&(0x7f00000003c0)=""/118, 0x76}], 0x3, &(0x7f00000001c0)=""/41, 0x29}, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000480)='./file0/file0\x00', 0x8000000000006000, 0xaaf5d16fccdb30e4) sendfile(r5, r6, 0x0, 0x10000) [ 1985.245016] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xc00e0000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) mq_timedsend(r0, &(0x7f0000000000)="39e263f96e4c3c31cfb9b197d4dc5e4e3ab096b3c73b35927e9fc6631a83a889bb06e352360d2503db5d1c471f63773a1f9b53793e25f93b305f64e3930669809494a328b900", 0x46, 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:21:26 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RLOCK(r0, &(0x7f0000000180)={0x8, 0x35, 0x2, 0x2}, 0x8) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r2 = accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x4, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000001c0)) syz_read_part_table(0x0, 0x0, 0x0) getsockname$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @null}, [@netrom, @netrom, @rose, @rose, @default, @null, @default, @default]}, &(0x7f0000000000)=0x48) creat(&(0x7f0000000040)='./file0\x00', 0x2d) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000080)={{0x87, @multicast1, 0x4e24, 0x4, 'none\x00', 0x5, 0xff, 0x74}, {@multicast2, 0x4e23, 0x1, 0x6, 0x0, 0x9}}, 0x44) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x100, 0x200) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) [ 1985.350362] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5800, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff6a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffff000, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1985.522670] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1985.562674] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1985.598874] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@md5={0x1, "fb8f2b895b403ed4a40486fadf69436e"}, 0x11, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 1985.672660] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:26 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2d, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:26 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) recvfrom$rxrpc(r0, &(0x7f0000000080)=""/56, 0x38, 0x40, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x2b}, 0x3ff}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002151535fcf0c8a9585ea3003e4afc09fc9c305876cb261e40fa9c74e5f35df1dd5400f9e77b973a5a100ae1a86c6007644bafa13544a88574cc5e54cc9976d5c2fae00ecf7"], 0x20}}, 0x0) 18:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1985.982365] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1986.004834] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1986.035572] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1986.066296] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:26 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000140)="55bf92c68a51472bd68d49974c5b18423bd01e2765b7a88622d7b33b66f7dc07c6b8e2c1fbe954df06adfb146b74b0718330119b51f19ef33ad4ae948255a1e5a56293b5e9b69c7498600fad5aa8c9b369b66bf02415c2f8d1e9aa722b38f1a2c462ceddb09fdcc86b96f381b59db6d027d47b9b85adce603f6fdbd50028be9301a215a73fbd2f1f7b419b4956243615d2da0c1a18e8", 0x96}], 0x4, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:21:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffff9e, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:26 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:27 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80) write$P9_RSYMLINK(r0, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x3a, 0x0, 0x4}}, 0x14) 18:21:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:27 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1986.284378] audit: type=1804 audit(1574533286.958:7904): pid=22468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/643/file0/file0" dev="sda1" ino=16549 res=1 18:21:27 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x48, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfffffff0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:27 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x40) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 1986.398509] audit: type=1800 audit(1574533286.958:7905): pid=22468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16549 res=0 18:21:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6403, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:27 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f00000002c0)={0x2, 0x0, 0x2080, {0x6000, 0x1000, 0x2}, [], "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", "8a9685f358dd903725c582ed409da8adbfa11ca8a4ac14418c2f7c03f573a0bb8e6042f4e11eab52ce95ed57582ea89d5de19bb4e405a93982cbf1c849febe55fb7a72eca6a7bebea1b1beb03d27cac0bfa19acbae755242df45cebfd367298dde639bf6a5b8344e7978b614599e7d14e0d280269fa9d32934803540d0defcf8acaddf3eee605d411b6323dd3f0d8ca748f508d3e8637e98eb62c499be30165c865763dc101e04512ab52b94afeb4de90d8c386fe9169e3ed5e1d8e1fa33e98f4145b8a15cc37f076920d964b7fa8ff2581b5ea5e23779082031c8de03f061e0806cd150700f0c5d06e04805e9259d40c616352c1a339bf4e1d13b69af33838d9775de50883b6321f6abf9db5404a1cd7105ed76f54cda3c8245f8b2876081eed379599bc4c5bdae64f3741483465c318b62fcda4431639a4231dfb5854bf7f406a5ee31e66734fb3cc7a924fa3703cae966fc96e676dd4b502af78f20561da3ae5dc94f99ddecbddf54dede77f06ce23fac20f4d0825fc85ccdbd081c1ce388f92a7f089120a5a5497e58d58207c3498b8a35b74c38730188eab8ef995bd32ce6621d98c35f60e7e0a9f7caaf75b86f0443c14e721fa418880c7e98499ece7ecaa72d34c75e086c52743ef495bc8770736efba3e31cba9641cfcb970101815252df40b5207f7cb8a23903c8c987ab4b90a8a660b32db7824922f81f38b45f37c2fc1d9a24f5b0b0d5c1e3364cf909858c7e6374ba18d6f2510918904b1c866ec219f9d1a606ef2fe9672c79ecd09693abc9943392c053e3b6fabec7e6d999f130c2c806a44798f0bc4e0d316e540f57b3425b491f7f2e34a8579228613f7f8e606f59557477ad0210d217382cc903dc45ca066dfbae1f79ec5c58d45118abfb4382a002137cd52e5e4a251537c4ba416a95df630e3b5a28713b46a1d3405dbec3fe76dc5e0bf715b3479af516631c93ce802ecc0d16a2402caf69ca31d90297d39f3a6707a66e1e913e20d737c7b3af514bcdccde9b883cec88b40fd291b5331d52adea03405dd6f964ad0ba48da9ca485ab228199e17671b66d3c2f8e0e431a2f484b67eb87fe13774b7a70b859d6dc3fa6c06b0c3338591ada2dd6a35884bcb451fbf3739203f132a6dcf8bda0fdf8921bfdc09200e0f60b24630694eb016007c1904439e1d59c3fe00a7ed831a5f0765efe339403c7ac1f7b8bd64f2e1a6cd9292e48482a025e0a233e62d030df1934de64fa24eb3304709859f99aeb8d7559e66cb33b95d836d6071db1aae49375d3f5ce5337616175f3dffaa612fb9c0e658c7c5cb433697ef1a5f41d8d70b4725c0945d523c564740abd6bb4b3306cbf097d0c8a9fad381940b8de0ba9dbb4243f4930bea676fcbec4e473cf31a4facd9d0545eec8441d1bb455d371696da40bd530af9227741e6c0b153466778b98f2d65f276887986f81112308337b14fe8756443f6d623d107eeb60d0145da046814f02f3364b82f86f9d0a1389af1a5fcb9c7e802dcf2d0610fdfc26ed10d2d61bfc9d7df5b85d9b148647a0fb8149940bfa6ddcc31fa20677cbc1d385c4dbadd5b240013d8eaf1113ba42e04b66d776e2430074dfd5a74f22ef8337e03b471d00b8d1e8d56917d9c977482726f2f4263a0ead2f88b869d137e2b2857b5b39f79fa2646012ccc66d3666d6e6efe70866d0242a2e644fa78dfee8242c08058656bb67f1608d4003e661a58e403854f0f4b96f705cc76c973c0deeddfdff86698fec5e4f6a687c096cd1511647e01ae5bba42b934629a47acb20c02e6317773559e3f342f68041a8df52d5ba76aaa840b87105b32008c2ab9b3a77add615c39482387afcc4b9d444162460e8e44c8f88955b3e2bc0dcfedf51c0eaedf74c95025c34f66b1ec423ac9c9c6bcea67fb7ad775bc71f2f07e73edf4171c2673ef9c463c35435d5c84b1dc58db336328bdf9ba7ed7c72ab0d70b7083bede82983a3eb842b344f03e861d99881c9bc8be581393faf1ca6a28ad65a0dd4edda4ecc0204642dfb9ee1596a9df60117ed315dbcf12a7dfe9097f42694628ca1f2ad260e017530095272668e51f588221686fc48e4af8b89dceb8568831866fa0f77db23d2665eafcc23985d34de0214fc8f98e429df63e22c9291d9ed8f60b15bbc6aebb6e4212097effa5d0de9ccd6c43bf0883ba7a5fd39182a45b62cda00417f29db14ffc1fe024dcfa60ac4ebe355b98ff177c8c171bbbb6b20c0f2db18d4b815f18a563260741a99210beb1616ce5f60aa491e3165960d4648420897b1a0352dfb50905dbafe87b6a056cff07489f5d253f84bba0783a337f55b8ca0fe934a902c262cf6e07fb8f6906926a5460161d89df3b72099c47cc31577fa967df0a99cb867552c4c9aac5ae8716e942c9ed5c00596105e9bc862010b7105b1c2eb62f6295ad6ecce0fde16a337a81cdf923e140d84f3c8407e22481ddd74e51b6a06c23355e5586d72b254ad425c8fbf21267adf4a0c64fbcf54ebf22e6cb0c49a67ead2ebc971c8423f6f584713e637983ba3734287185b5efc2f91eb0cd1e102cc4186dee71f975dc6583e3c17c2685079c41adfde5f325ac9aa56e218a3c9e1553fe981642700dc1427749da253f160b4d30bad2e71c5b6adbf13ec3cbb3479e5d695f43d01746c265eef17a4de52284aed6eb3d1a610daf75a624b81479e5a9fb976e620c6b6dc3d878c1b8fed99d2efda28b1816b22b15cb7c5f22a11834d4e06dafa38ad8bb888a06fa20466552460513a3fb31c4b7b929399c7c2e05683dddf94795964946180ad1ec10ec8f805774291d148436f790d4eddab6385f4f915e20f91a0380744669421b65f4ea1974f87fb730501ff000d98beab273a69fded287f33780803ed28bf79e83f849df5f824ec0d59c812504655f3cac3c5d8e4ce49a4e882806acdc58a7197633ef8780f1526266a70fc82e33eeb46a311c1d02b9d96813e7e2b65e326ef24f42d90597a3969c8e54643a37dfe04f3fe53afadcb9099efce5f19a5a10accfdb9137f607a6e024daa3a4a9c967c050bf1a51fc15225f25e75cfa85e9aad652727649d47da91314fa7927272376e588ef698b241f8d1648ef3e1ef3d5a7dc3b10830efe2adf85ff92b9e3388fed0f26849c6069a426ba1da9d6e0ac32232ea59b8376a4c5621d7e03360e847a98608ab71fd5c42959368bed838c3286fada7f440a99766d1b3e5b6b249fc84177c0c2c4cdd3f4b3407ef40af51ac9b6ae60a2d4f43d94fcdf2be9f9203d065ee24307faa026ff0ec117fb2ea17c7e076e99d9bd793581708dbce98a0d2fe9d05d367f67c7e98ff3a427b1b7ec7e3aed7807137d65232e85b0ae7a2e62a4d7041e5555bd5b8c808345d15234abd988302c63528da35ebeb413ee310f819ae15d542e5d9df9a164bb1f14cf96d319800f4d4a82cde5a0599956d05c0bda82a71f8f18f7ddaf145f287c4229566b87e9699abfbfad2e8097724f48e9300b9988cfc6e69f07c3cbac5c943fc8cfaa00a59e7ede89746abee5177a11f7370ae49022d847e6b9146820a05dd17f8a6ea3d25df359198890bc04c1cce54fa19faea2fd0359fd215d3e6e56dbcae1e544df28524872e1082a1f1afac7e47a26ceacd3f2ef4adcd0da5c7a71f626c17f4367561130cf53f389217e7338df2c8065990d52f4484f121dc9c6df9086d7ec0b82765213799c7351e15d87735b5802d7dd7e137863ba87240501010da4e5fbaea07663fbbdd94d073beb02d105a7efb6d1ddee8f68108eeb31aba34f62775a162e763a056da5908c8021550e827b76a59b47b4fd01b5b4e903a21373bee344ee90e1d98e826739b7b4ac03be19d17ebaa5bec84ae9fea4e8285c517bed45ce21a6f4987b96c1313fbad2523db8196c7353c90c5ece9da4c667d307779ff854328fce3bf82bba5c03e9e6cab371ccf9b295c748427b488214b5db92d814d48ebf928449d93f6a812f5c694ddbda5d9ac97d6f15626ef77e6894c340b4e48d50077bdff72094e560477f22dd8e7429f78ec8e1ee71ba8773c94e4ad7aac3ccaf0c9820072d748d5aab9337e11eecf2fc8cd3c3ed13d53d694646949e0667664d1ca1932d731a38aec4b802e02cf69d0538b5ff59a602b779740649ad1acc34496b34d84b87692689c36da1385f39ec858affffd47084d56d791b74c67dc03a67f4df89c0bc107f1ad7188853c1eeed46e8c695ff2fe33fc3c63737f1d4114e7c5743d6ea2c9c77a103a6dd7040adfdc769020449c7d934bbd2a376f2670c4eec85f4631657e09b824420002ad7d3abd3d7d9af5d53ef0869716211630cddc737809bff610702297702ac282adac144e02848624a3079472e4cdbb8fd8da4aa089a6e1bedf4ebe3613d4dac3d51ac1c9735979db73f074efac9671f7faf0eff989a6025d5488a42172fcd0f16bdfa656b5dae9523612b95eb991ae912abffd137dcb5260b60f5de688861405c82808e34faf093827750eb120a3f29f807ed75e16c8ec62f29faf6419af27a828d464c9ae27887cd94d77b43538a4d32bf3726f8070052124d0cf7274ed7a3e721d5c2114473f202247697a320d91996f7a7e99ce75f2990bc083147feb13a08f77c00044d353165533d2a63d3af492dd2b70714f5e03c09b76c69c03cf4f98475e282f388cca960180c958586e73373e9bb179964b8b33edfbb29bf1d1d65d07cdd5c82dd3e64494b06a711a05ffda3181f9065871ce0dee1f2aa86e91f2ef5b6a6101e5c647b7abc9190a9c8105523dd4a014f2703d295e3fa6351e3af31d3f17b07b12e61a86851910d57cd0b60e82a928825fee1f86f63ccacc5470367c5ed099a9ab54bca897a577346fc4ba1f5410fd195b0d9e8b4175db032912d1db86c30e504a94e7d37e9b06dbf8fe5ca254559f558320280b441223227d78a6b6b1eb134b2cccaee66e88b753e6de375aa4f8822dfb3d7a1651d5c245c5b22ba468c95ac2151e6b8d0927481a54e485f55d42bc56c392580b9cf7ac7eed075e7a966bf3c9214f4b5ad8d8cd9e3dcb0ba7744af4a77d3118d657197276d9e0f3af561d701005ff9b8e2211f7eeff7540f3ae2cb59b4c5b32991e6c3a8aab77dcf3e5116e6fa688b65a7b715ae7d2a5f11950205939512bf7ad25b5714d4c9c83b2df6891dd829d7612684ec64d5b4f5133eb0b9b3874d2ec3b06a7a081004f5363aa96f72b06d602c29e9aafaf8a00000f56a97113509d039bf745eb9b094a889f3a15da6072c4d9128bb65587999b1acccc66bc97f64cf24c6c22cc79d8d9ffc8720aac45307c826e2e0d70dcc41c19d176af0e91068f3d64f5bc6f3fe9fad3ff72bddbc1cd0475a19b5086f2f9b851bc134027619b01815e1cb88b51c97c9caec9b20c5a8e4c0f315904bbe1a781da7a7e08cb84492660602b984b328ba8098dc4c07c18febc513b1db083a4846b8a5319c4b73e85f898974ea52667da1325d06b6e3cfa7e9f7197dce10267b5a01aba2f6582adbdaa5941c1321d6ea7124e4877884f91b62bb1f92dff0dd9bbcfd3c25e80e228191dc1540e2aeab82f31ac68f1b0d3b90c6b2770fb6118ba96f02994f5a3ad4facd4d3f0e1b9431e317cff6b79b7ab56d99844bf550040881c1eacb673da3adce0affe374231fb73b29cb849e48ce1df8e10c377558cf8495a9ed872719a8cfc33500378aae8c9d55cfa9878a20048a9e5c337c51a6ce0df04940a28107fd726cf5b8fb7176663a015cb93d88f2190620682e4fff913848450161ee0f469179f7aa"}) creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x9, 0x511a80) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000080)) 18:21:27 executing program 3: socket$kcm(0x10, 0xd, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xf, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1986.642220] audit: type=1804 audit(1574533287.318:7906): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/644/file0/file0" dev="loop1" ino=523 res=1 18:21:27 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x100) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x7f3c166b476d77b7, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000040)={0x5, 0x101}) 18:21:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6602, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1986.717852] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:27 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x9000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x3}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1986.805015] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1986.813457] audit: type=1800 audit(1574533287.348:7907): pid=22496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=523 res=0 [ 1986.856027] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1986.886073] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6f01, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:27 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x6, 0x7225afb5db613c70) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x9, 0x1, 0x20, 0x0, 0x4}) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:27 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x3, 0x6, [@random="c60a481d5694", @local, @broadcast, @random="8b8f7b87aca0", @local, @remote]}) socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:21:27 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xc0, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:27 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4c, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xec0, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:27 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ptrace$getenv(0x4201, r0, 0x3f, &(0x7f0000000000)) syz_read_part_table(0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0xb0800) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x1, 0x0, 0x5}, 0x0) write$cgroup_pid(r1, &(0x7f0000000080)=r2, 0x12) [ 1987.043294] audit: type=1804 audit(1574533287.718:7908): pid=22535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/645/file0/file0" dev="loop1" ino=524 res=1 18:21:27 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) r4 = gettid() tkill(r4, 0x1000000000013) waitid(0x1, r4, &(0x7f0000000300), 0x8, &(0x7f0000000400)) getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000580)=""/4096, &(0x7f0000000000)=0x1000) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x33fe0, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1987.149641] audit: type=1800 audit(1574533287.758:7909): pid=22535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=524 res=0 18:21:27 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb001, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:27 executing program 2: r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0xfffffffd, 0x2, 0x1, 0xffff, 0x40aa, 0x1, 0x226}) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2000009c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1987.269054] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1987.296780] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1987.311527] net_ratelimit: 22 callbacks suppressed [ 1987.311536] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.321675] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.350316] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x7ffff000, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1987.399055] audit: type=1804 audit(1574533288.068:7910): pid=22572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/646/file0/file0" dev="loop1" ino=525 res=1 [ 1987.439527] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1987.481532] protocol 88fb is buggy, dev hsr_slave_0 [ 1987.486879] protocol 88fb is buggy, dev hsr_slave_1 [ 1987.499162] audit: type=1800 audit(1574533288.068:7911): pid=22572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=525 res=0 18:21:28 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000080)=0x80) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:21:28 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) r4 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={r3, 0x400, 0x4, 0x1, 0x20, 0x1}) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:28 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd401, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffdef, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:28 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x56, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xf, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1988.039571] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1988.089117] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1988.106501] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1988.127273] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1988.281558] protocol 88fb is buggy, dev hsr_slave_0 [ 1988.286734] protocol 88fb is buggy, dev hsr_slave_1 [ 1988.291917] protocol 88fb is buggy, dev hsr_slave_0 [ 1988.296972] protocol 88fb is buggy, dev hsr_slave_1 [ 1988.751578] protocol 88fb is buggy, dev hsr_slave_0 [ 1988.756740] protocol 88fb is buggy, dev hsr_slave_1 18:21:31 executing program 1: r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r1 = accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x80) prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r3, r4, 0x0, 0x10000) 18:21:31 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="22b30006ea0000000b89dbe0cd5695edf4306de12785ff34aef5b1867c23a2deace3aa5e1e8d46cb58febae5fa9ccf40910e5be00e9b73ba0534353148286ee944a1b054f60ee9129b696b354499323fc98e5475de433f70bb23d8783d63f40d7d7479b06044ed948d0ea482d514eb68d5a711bbc5a1f2479c62e4d95c5b398ba95ec778652340d519e8a77d069655d3e61791d53525176a86577eeecb55e3cca3ab7d0e5bfb62f63895cf622ce0732019066df8af474c"], 0x20}}, 0x0) 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xedc0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:31 executing program 2: r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="fd", 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='id_resolver\x00', 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:31 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5e, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x2, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1990.375156] encrypted_key: insufficient parameters specified [ 1990.409900] encrypted_key: insufficient parameters specified 18:21:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:31 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = geteuid() write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x0, 0x1, {{0x5, 0x3, 0x9, 0x0, 0x9, 0x0, {0x5, 0xffff, 0x8001, 0x8001, 0x1, 0x4, 0x200, 0x9, 0x0, 0x1f, 0x8, r0, 0xee01, 0xca8, 0x5}}, {0x0, 0x10}}}, 0xa0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1990.513732] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:31 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000180)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x7) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @rand_addr=0x2}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="16b529bdf6b4fd7aca186e35388ab07bbf7dcad78dd4a3abbea731573b75dfed6446f95fad5773175ed487eead58255cb65e52aa107d027605b57ef985879d079c77866b5937c6306ea63799ea4bc8e04725fb654e0fc27c47fd452ac23119574ed3377fd00ca1a364cfd1b6d0db33ea22ba13f3f3d4ead220ed156eea6f60468bafc013d1a67557d97c8fc7b21025ced152709a1f8bf08151f47254b53a83fd269229837f627a28d78244848ae0e5f54d502f8b0b9f93025eff287203e6998c38876254f37d46e47a54e0e6803a06f1", 0xd0}], 0x1, &(0x7f00000003c0)=[{0xa8, 0x19, 0x4, "6f58e081b242921feb73970955340416b75949ab630aeac09ee6ef77268a00ffaad2866f1f97a3e37ee3779203e9b3dcfa65ff2c119e9fa5e92080610d72c0695e766fefd919115fca238d8f1a177a813131de568c2f7c2a69d75b0660b11bc77d9966aec3f190514d15b3c0150cc053626bafa1b62f74f8c57c1ae017a6a0a62578590080297fe12d94433311b65abb0665dd51"}, {0x60, 0x6, 0x0, "9bef7d870618ac24b075ae4a1ac4abc8a11b3b2da8eec98657517afdac8a3545eb74cf03b87f133d37e43c9e57acc1511095e8c920984c484fa58f7af75441262105b0838c5777b0c70c80"}], 0x108}, 0x40080) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000000000004", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1990.538492] audit: type=1804 audit(1574533291.208:7912): pid=22627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/647/file0/file0" dev="loop1" ino=526 res=1 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xf, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:31 executing program 2: openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0) r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = fcntl$dupfd(r0, 0x80c, r1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x0, 0x200, [{0x5, 0x0, 0x800}, {0x1, 0x0, 0x10000}, {0xffff, 0x0, 0x1b}, {0x4, 0x0, 0x240}, {0xe730, 0x0, 0x20}, {0x4, 0x0, 0x40000000000081}]}) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1990.647010] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:31 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010002000270fff84eb5658aea617728ac06966c13644d5415ebd1f4e795e0f571dc462cac667012ec7ea84ddcb41870fa", 0x3f}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000480)=0x12, 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0)="4d71f4817243ec9e504532721501f465c2d7c3d015409c9598df354548ed30b3f622db0e5d4c9edd7bdee6bb936caf8cdce3a4db837173bf0e8b55b2dd7d842b62e22f5eef7ccef066ef198ac097", 0x4e, 0x41, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000001600)={0x0, 0x0, 0x102, 0x2, {0xde6, 0xba9, 0x8, 0x3}}) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000001580)={0x1, 0x1, 0x1000, 0x54, &(0x7f00000004c0)="887481eb63a20425c704ab553b85215a7abc950c942652ef6fe203105a5f34cadb7e7d8cc68b99540433fdfb340699cf3f7be42caa02fa9920c9eb976932dd75bb99373cec5b4692be4f8f6c3f5bc7ac5181aaf6", 0x1000, 0x0, &(0x7f0000000580)="b17d93c658bd8570e6c7cb81c7648749b0f44dea49fde2685017b22045ca6f66ad604690edebf318f81a29f92e629fee7f1a8ac0923ff3ab890f7577bbe7f38ee652b6d750528d21f232bcc4e0fff87d1876b69443272e3772d8ab8fb13dbbdb44c0548478ddbc89c337d78bd791adeaeba9d656f53a44d6d0633e7e8efa705a5201fd816491503e35e218b93deb98e740cc90b514e77b5f51504af6715c724c03479cbb6274bdd57ce8e8accf8842e77c093fee11917b9c93ee827fed1f6af32efb04b074c457ecafacfcbdd42c760c49e3291ae1ac2ab7817e9a973ec618085801708c4fc8a4f4d48d3dacef0d68150722bf6a3591f17c040b57e0e1f3fb427366ef6bd3eae1f254564e3f6b16b1d18252668bf4738c72b644781fd9bef93cceb33f2a3fe1cec1d78b63f42d95356839b161e09cb33358585a8a255e839d5b4670b9a14b9c3062227b99f8e001a6e8f2ac8a208510ec02c1452627939149c3d1a43f84ef1e280a401dcad6558f800c447c56b34794268787366c04f87be501d866a60fac6676f08a71d10247efbae1fd826c1115353c869fb6eba384869426a6fdb93e95ecf7f968b603612c7228c36ae2093bcd6501ea70fa5a7d765ceabfe46a74aa91a8483eafbccc88855f34bc7da58ff28c681110b227f45dc8f136b6087722cf4ad31ecf61a9710cf1f5500ce623cc098e4f28fbb47ea19eee4f2a3333ddb46bdf73114605788c434483f82009781244a7580c3b6d11eb5ad39269a040645677e553a8574d35c204e565584e4002b13a5e457a9e015370909e3090ce89039cf949cf91a914f291c612b9c9301a96ff26e1a663ddb3a32590f03b2f58658672e3dd0a80d3ca8cc7ed8c1bdaf9b81f8e8881d2877922f23d0fa0c4f52e6d8b0c449f3bad1ea1b1309b66976a651b6226384fa01100ffffe98de93a7da033b459bc64a3572fb95b7bcca27d03ad9d5c91fd66c3236ad11446b59fe74d6d83be66811889eec4214886310e2446d669bbc06ae4d57f19a1ee3b5b83f6ba87bd7b27f484dda646f3cae0324961d87683992c37b6c5326f1fab9fe3686342535382de2e7d4b24a4e49c2b71263137a73c73ccc6fc5a10a53588f87a62ae77261c0e298609fe45bbe869cebf86499eb383697e3823100a2ad5e8cc00cbfe6eb04fb18e0103033a4f2c3e005f9d064598f1486dd28b3b4b95b56bd372ba0dfb3c960a01d210c299b83302e391a7a20cb1abcc1266576a7c371842aca1ac8558a8adf74acd694f945f0486e76ba5d62c2ee0cf6ba9f7d39306782cd68e1e03f3b1d5d50471d58003347c99f8ca8e9023704cbed4decc50a61874df830e5dec40d551dce1811c8ece63889ceb9b4420f492e9d972ad163f1176fb8e4c7fadf3251f3c0fcb6dd05bc60a8a73f0824a3ed7b709298c3c29c16345fdde6e65b8dd877f743cd8c223aebf9b26230dcc559026ac365cbdab947f35959e3f1aa1ce11f11c12b11d5e6e4499bf6201117eda976bf4ccac01b5ef1a0ff8e2ddc796b0bc00a62ba638c90b42df6cd347f4bdf51b0a54d31cba1d512bffeecdcdddeeafc8397976a5b34c469c82510e42af17f6b32e05b4a94fa92b1cfe06c91e5cb62311434d160144f7baffc1c96dda47920604d399ab5f31a913e3ee95b27517859b35a4b5317dc8b578897ca7f80af3e948e7330e47d5fbe618395db7d8a12ae905bee888f6bfa2b2e94d2470a53ccd0f2a37e6f8f5e0656254a307f156c5ac8b5f3a4f611df61e11e9c35db2272b29b3161759418262481a0ee25cc6097400dabdc8df0b6c63e5f0e081f01ca178aa10e2bb8b24dc063a3e86461991af6cd9acb4a2fea96b9dded635824357dd257128c615e85ad7d31c0134ed5e3bad9d5d9574941e286ff3a08592956102c2c30f10f78933834057ddef8e3db2ff18732a5c21386f5ed7b24b386975cfe48bf83f041fe67076ec436bafa75642b7da07bc12c66dda4b13dd2f58a771d7e67097dee200c2c4c7b695396808c52a97b239db129074b5234a396035ac4e321ad4b2d5b58be0ce96fe9f4f53f0c41f3213cb7dadf74324ca1848a80ba8b1f190b9bb33d28b126f93550826f91d65853cb351dd799482e093f03fadcfb2e8030c783d3052618c692f31899f15e47dc9d6dffdba47b60ac92e1687d41e9a1116d860023e8f6be0382cc94042b241869a65fc248708fd2391dc01bd8756cd55aaa12e9a081ecda934e783dd4bf41546f83fe52aa41e1ceb34246aa241ec5dfaf7e9ae9e20a7d34c4c2851fc30ca46f6db5ee13128c8ee7f09a7c0181a009d4ed9d823253f7fed48e4a6ba955ddfb79f0b6e23a59a0d15110282280aa1d9f44116a4b9eb8596a93161a6f714931f72b769bac4372e8f9f0069ef6def5e44aae831fddfa6f7d02d9bc9883f0457b161ac3d00e8b1a1847dc55a443bb1ec95f073162d75c2e273612549d97367f2d328a7b7bbaf167156e3cf5f85959a00e0f9de2ff217fae3e47e681b8bf322e8c1b2a07eb5828fc2cb8806429bacf93e189f6124c2e1d2e7022fea181003116dec58f7c9ee798aeb434d53692feb6cf32b0065f740a1c934b140e31c86bc6620dbfad4460066da2668581c0b52dda1ee34b873f91f6a0eddbb36752db787b2bc4fcfb9c1015dae79dd6fb257b88c37ed114b36137dd78c420a8479a4e5adfa56a147b6df8845fdd2f422ecf25043996b9261fbf7e99395ce6122fe6bd955440cd5c7527cc4421680fa2bc859d19a989a26b5d3b92c7ed3482519d283a9474bdeec825de84a700a0319099df9a03b8a3cc1273190c8f927b5c16aee3b4787a66094ec332af03532d4a8e03b715cb7a3bf9944008e27528ef97118a896161acf0208a52376e22cf20c7458338b65c55457950fe5bb526857454dac569c403afb4d2fdcbe93388e5e80de4553b53059ac1d169d4a8882a9ac5d7756bde7bf371165109185a2aa917f43c83321760cc56a35d2c4fde1bf3e962d88f5c14b3cdc7db7d3b1824ad81d245694c5ffa3433e5bd15761e69121049b3ee4bda8de21f8ceea2e98e69b0fa25f943f2e1556a5a3355023f6f1570d234e1b9f9d57d3752d8e8e81d85a3add1338b3ea4d5722d57c963169d0bf3b2a6362bd544677f0abcecb62e11c90329b5da69b36a4227a43c1624b7c3a5b350b6fb089f161ed43b4369869f460339fb46e9435cbd26d706451298055d502d7e3dcbbc97eda42e169714ac23251adba525f801d9872819703067814adf1d721558824c33a0f21bccb691d06b8414ce6a30409dbc313069bd8f227913ea3f2ec09fb70d2e1048f2d28974b7f45bd550537981b034146b6437d5938f25eeec178baa57563c2314fac6a2ead2ce87342b3634e0062b58e375cf8351a955634d6442bab0426857edd10a755ac47294e2ad50bacefdf8b3827d7ca8debf9ea948f263dd9d611d5224a9b130cc3104bf83df2bee849b674bba9a9b1171cc346f5d179a4ecf0f3ea5f7a0faa8839e6002391c198d9dc3f2d069e2f7ce3bbdcad182f0e09279fb120b04908273e180393331ae47b0942a5acdd543e874da22bcbef581c33493df658c93e47c6a85efe48a751c719f95cb5f44633147c010b7077060bd93826a7a6366bf52adf4ee565960ad921925f8c3dccd708c2f756a6de2ee9d215e0cbbacb46b14e4d227e53bb7d71cde2213bcf19b21c75ebe4cc57e4c4454b7d58c6918d1be9dccd5e4c5c41978264a3a5adb1eabbf6bcb472be86423bce2e941bbb944e0e0b2b7897f3834a7215c80ed38a2be26cd8340d695373c2e573d7ad7fb8096636491fe60fdcf2fc8b70373ab8bc1d9f44f69856617e4296d448dafc305515d2ab3607e5852fcfef74c93faa97c94285b8ea03bd4e05599047e7b5b2c53417c1fdd6e5bf284bcde97494b33fb069bcdedf3506eeac5c8f3cf9848a2807c924e14303b0ca6b15db2303252a35306bfd2743b0ec13c35dd9c8cf08e37c2a7bb7b1fc6b37dfe24763ed8d0838a637dfc2dd4b59e539ec419a62a0f240e49042e97d9fba1bbcf890bf9b3f618986847501859eb322b29f4bffa8908048b1bedd044ef3f5fede5d2f8e893671009ddcd9e32aff9d81e0d4d76009326ea3ba2cc971ecfaddb2881e90c43f8488b5d2992596576115a6036bbe85c1ee6401d109435c0de6fc055da5b4d3b8803a780f469abc4aadec8c9c3f48ce51ea4ce8f1df2e20dfd094a302850eaa2a0917fb3e4b30b7ca60e393ff1aa0c526234b0e6b559bf0c70495faab13fa4c82de72bcc05eb513a3f924adaf4c1445b77d04baf119867a910029d11afb6f6dda34377648105180999decad62e188d82218d59fcf21205ee787bdc0969cfc44daeb60c97c5607bbe5b89a9ab4c29d241105bd1642cdd690e28e94610d7805442d95bbd6bcedd3e8955af3f8a20a9abb8b8a977dbcd0c16b5a4fdcfae85bfd4a4850e24862ab1b92f89427097be0699f068f414b39c3837f1a95f5c8602eb93cf7140b8f3519b8073dc4029faadec56ef229569d969e53f1dc08b062c982be790232bb47230cd95d0f2a5ce7ea29fc9997fecbb7d1d5d828d83389baeae99b8965d44ff08d9f9118dcd58d4815c10b51e6f938ab17f9df7fc6d68c5c2af39eeb373beb5ae1f5817e5da038a363ff86bd32f6b6203b79681b49ec190abd8b3f10d027b43e73ae3725bf87998032983d0642230e33a79e26232ccfa5d13391b0774dec587f369863a517d28b7a0e9cf58c8cc1a0138fb06ec8b8bb9d5ac3ff908698a5b9fcc7ab8ab56f1795830d6a07413eb21fe3de8612b42b990bbd64b8e6bebfb0b5ccad28cde9ae0a3cefbe4634c51a50335f72de62cc8f63cb06ebc243562c0fc8e783188661ca747b2fb5a2c91bdde955f020780235a7f8dfbf983a9e60ae53b2dd220b9fd98f902a63011582670a837b6c060010275105283b4519b885cf09ff6994aab9032775b5698ec249a5bbd478091c57107d12b9881567a6854ad56eae0b453c8f37e1dc7d90c7e9785fd99c3cbd6425528f6559a6954817d23f3d6c6fc566d535b2c93679b649055a91fa1d10a61da1ce17f6532a9c054143670f591e4c7fd856f1841063a4ecd356d79b98fac3d5d2892ba9adcc368e09e9786bfe7d617244c412c2dd684da7d74448049d60aa164d251bb599e8af7e7dd8e175752968f42f07ac5217466e9fed9009d6954f84eece87b5716bcbd38bba8a0fb07a19afb57a9a488429fe80c988e7555bea260ab55aa968ef5fd589a7bae7f7b098c012def36098909bf182ca32f629eb45d16fade476fa296b8b13beff60cab7eccbdd17229309bc780ea31baeb9bf141055382d172ad4981d3e159847fe40b9c764ae23d45e4e41155932f32c1577732c0c44a9982d6c3f913f461286637b9195e360c93d8362b9c14190be44b06a3d0924409a3ffe0de652f0649fe58ec0664a0d9e45afbaaaed839c405d10922961480535465f571cc7106c8e978abf8e1287f2dcb85751e7cbe250303614c61b6e211fb8dada600efedbe726d9e7e7156fb9dbd4584e73e4a34f191b48bb841a0484a9d0071a53337cf7e979005064def52e15851d51749e87fce6d96f814716d0518ea860244352032284c27f5a0f7ffb15e7edb53f0f187f85e2e3f3aefb25aad07b9e98f1a88c319b59563ab0f0b5d9a0127f977bcd2505655b4959f3c47a1aea4c3ebc7aef226c887ffa665f05e6cedcf7d851b379f548144cf3b86263dc2a0fb784262609064621d5f16d918dc3cb26092e504971bcfd6af5405b94"}) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="2cdd6ac044003621998f63c70a0020e08cc53f250f824a643aac74dde70d144929801f22cee665822f08e12ca1b3de125dc3d6529721da49bcc7263229259fe8f20a147a7b010eeabe76b8315f1ea262c3b0778a1cf7cb5f5a88d545bb07e7706320a9571e8652acfaf40be5ce995c6c9d8c54fa064c4efae6fb2f7ee0446f31d060da0016ccecb3e6c15584f83826752d1c7b53cea9d8b7a0cb41c5c4a78d1a15f555b4386485523adc77bc2fba794a6128920c7370eaa162dda504c148f1558bbc149d4aa5abd90f65d013e98e10d4996901", 0xd3, 0x7430}], 0x20000, &(0x7f0000000300)='&vboxnet0,vboxnet1eth1\x00') socket$inet(0x2, 0x800, 0x81) [ 1990.690050] audit: type=1800 audit(1574533291.248:7913): pid=22627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=526 res=0 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xf0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1990.746302] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1990.769284] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x716, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1990.855553] FAT-fs (loop1): count of clusters too big (11881982) [ 1990.877656] FAT-fs (loop1): Can't find a valid FAT filesystem 18:21:31 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5f, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:31 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1fffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1990.918203] audit: type=1804 audit(1574533291.588:7914): pid=22657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/648/file0/file0" dev="sda1" ino=16535 res=1 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xec0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1990.988046] audit: type=1800 audit(1574533291.618:7915): pid=22657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16535 res=0 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xf00, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x1607, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1991.136924] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1991.204893] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1991.229630] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1991.269615] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xc00e, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6b6b6b, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:32 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x60, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1991.651221] FAT-fs (loop1): count of clusters too big (11881982) [ 1991.666540] FAT-fs (loop1): Can't find a valid FAT filesystem 18:21:32 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x4) 18:21:32 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x6, 0x2, @stop_pts=0x8}) 18:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xf000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf0ffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1991.733260] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1991.743293] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1991.754935] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:32 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x4}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00') fchdir(r0) creat(&(0x7f0000000480)='./file0\x00', 0x90) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0xfffffffffffffe47, 0x800) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2000000000000100840000fce23d25d2083fb6bd2a0790a65cd100020000000000ac9cbe3b559fd0f4f3f42846f55500"/61, @ANYRES32=r4], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r4, 0x4, 0x0, 0x200}, &(0x7f0000000140)=0x18) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r5, r6, 0x0, 0x10000) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x1e, @local, 0x1}, 0x1c) 18:21:32 executing program 2: syz_read_part_table(0x0, 0x2f5, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 1991.818637] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x34000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:32 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:32 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40800, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0xfffffffffffffffe, 0x11c, 0x6aa}) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:32 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r3 = accept4(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x3fa101fb) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:21:32 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x61, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1991.957606] audit: type=1804 audit(1574533292.628:7916): pid=22735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/649/file0/file0" dev="sda1" ino=16522 res=1 [ 1992.070653] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1992.074167] audit: type=1800 audit(1574533292.628:7917): pid=22735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16522 res=0 18:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x400300, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1992.110525] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xf0ffff, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:32 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x2, 0x400) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="00fb6b06ff1de3ecbdd769f54a9e5aaebf6b4788d4186aef2206aae3c4fadf5dfa178d3fe2a0a8c21668e74a1099ecd1310698a16d4f07767a6861b354bed29f2c42ead0b27f6f0584c3adb4bd46e623789e93831f2ddc6995864a52b71100c1978fb54318595a16695e6ef3b3c35fef09a01973a35add75629533903ba53887a24e02cfac25e1371b4b9f0e3cf4ba5cf0fec67c4b25384738403ada3941a10ba36c4a74796fc88af2d6097cccf40af0829fa71687eae3a558b94c21782db0e9bd8ef75ab68fa985b0e7f8401bb0b80843b5a26ea477d2651531f8003c221f21ac2a04752002b16590b3abefa338111cceb918743265"], 0x6b, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:32 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x200}}, 0x20}}, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) [ 1992.250318] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x1000000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1992.320211] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1992.373412] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1992.418286] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1992.431531] net_ratelimit: 18 callbacks suppressed [ 1992.431538] protocol 88fb is buggy, dev hsr_slave_0 [ 1992.437000] protocol 88fb is buggy, dev hsr_slave_1 [ 1992.447393] protocol 88fb is buggy, dev hsr_slave_0 [ 1992.452536] protocol 88fb is buggy, dev hsr_slave_1 [ 1992.656204] audit: type=1804 audit(1574533293.328:7918): pid=22735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/649/file0/file0" dev="sda1" ino=16522 res=1 18:21:33 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCNRDECOBS(r1, 0x89e2) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:21:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x2000000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:33 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000040010000800200000000000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ecff00000000000000000000000000000000000000000000000200"/64], @ANYBLOB="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"], 0x4d0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:33 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x62, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000)=0x10001, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1992.705704] audit: type=1804 audit(1574533293.378:7919): pid=22724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/649/file0/file0" dev="sda1" ino=16522 res=1 18:21:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xf000000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1992.802183] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4100, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000040)={0x0, @ctrl}) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 1992.876418] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1992.898580] audit: type=1804 audit(1574533293.568:7920): pid=22798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/650/file0/file0" dev="loop1" ino=527 res=1 [ 1992.928407] protocol 88fb is buggy, dev hsr_slave_0 [ 1992.928451] protocol 88fb is buggy, dev hsr_slave_1 18:21:33 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x16070000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1992.979362] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1992.983691] audit: type=1800 audit(1574533293.568:7921): pid=22798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=527 res=0 [ 1992.998721] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:33 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000040)={0x81, 0xeb1, 0x24c8, 0x8, 0x9, 0x13, 0x11, "b149491818f48873486f812a87a15c9a1a03d09f", "d4b34ccd36502a2d1d6baf924d07a4eeac83e3b6"}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001540)={{{@in6=@mcast2, @in=@dev}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000480)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x5e0110d368965fe3}, 0x44020) [ 1993.026921] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1993.047866] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x9effffff, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1993.131911] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1993.164858] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1993.231514] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.236711] protocol 88fb is buggy, dev hsr_slave_1 [ 1993.551526] protocol 88fb is buggy, dev hsr_slave_0 [ 1993.556730] protocol 88fb is buggy, dev hsr_slave_1 18:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xc00e0000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:34 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x68, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:34 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 18:21:34 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x29) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$CAPI_INSTALLED(r3, 0x80024322) sendfile(r1, r2, 0x0, 0x10000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000040)={0x9df, 0x7f, 0x97, 0x5, 0x17, 0x2, 0x4, 0x20, 0x8001, 0x44}) 18:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xf0ffffff, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:34 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_pts(r0, 0x11000) [ 1993.665450] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1993.726606] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xfffff000, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xffffff7f, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1993.858430] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1993.878927] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1993.889078] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1993.932382] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:34 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) read$alg(r0, &(0x7f0000000000)=""/251, 0xfb) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xffffff9e, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:34 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1993.977488] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1994.004146] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:34 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x6c, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:34 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r3 = accept4(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000000)="80a8f48d543ae8da1695d732f3a2054967580643017a1dca6c9984ccee917daa3a8641496fb2e4e70476e0db2690872cafd5bd37e2456e81d80f6417dbc402ee216ae8ba92b6fa26e1e4d863159a5e036aed9fcb0455e81df3df6a210cfd0150563642c0c061dfd3a09bf07c078dae7fb5346df543002ea93063b3cb7fb7f0058f4136d2f73d46e53d7c2f8ae5280bd146dbb065ce842b2660508cb002602ecc6d5986d52c3fb2c75b9bd6a7719b8163fe18636321bfe8341baaff11deeec058a6b66f1444b33be28edc8830671a2edc76d13ec3956cd17be0521ea0f21b2f9902ad71202e7398126db791c3aafac09ede012b4cc00c", 0xf6) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xfffffff0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1994.171058] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1994.215473] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1994.224852] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1994.235654] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1994.238278] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1994.298561] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x7000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0xffffffff, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:35 executing program 2: syz_read_part_table(0x4000000006, 0xfffffffffffffe94, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:35 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = accept4(r0, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80, 0x80000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) dup2(r1, r2) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 18:21:35 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r3 = dup2(r2, 0xffffffffffffffff) getsockopt$inet_mreqn(r3, 0x0, 0x30, &(0x7f0000000000)={@broadcast, @remote}, &(0x7f0000000040)=0xc) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r4, 0x0, 0x10000) 18:21:35 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x74, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1994.549280] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1994.566923] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:35 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x43e942, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x200, 0x0, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x6, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xff\xcf\xa5\xb6\xc5&y\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20084004) syz_read_part_table(0x0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x800, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) connect$vsock_dgram(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000080)) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x2, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1994.692932] audit: type=1804 audit(1574533295.368:7922): pid=22909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/652/file0/file0" dev="loop1" ino=528 res=1 [ 1994.803893] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:35 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000040)='./file0/file0\x00', 0x800000000e004, 0xaaaaaaaaaaaaeb3, &(0x7f0000000380), 0x2202000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r4 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) r5 = accept4(r4, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000002c0)=""/104, &(0x7f0000000140)=0x68) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000140)={r5}) r6 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r6, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) accept4(r6, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0xfffffffffffffcee, 0x80c00) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r3}) fcntl$addseals(r7, 0x409, 0x8) 18:21:35 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x42000) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1994.838185] audit: type=1800 audit(1574533295.398:7923): pid=22909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=528 res=0 [ 1994.877121] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1994.888834] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xf, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:35 executing program 2: syz_read_part_table(0xdbed, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 1994.903165] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1994.923063] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:35 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x9000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1994.968339] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1995.052754] audit: type=1804 audit(1574533295.728:7924): pid=22942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/653/file0" dev="sda1" ino=16579 res=1 [ 1995.136947] audit: type=1800 audit(1574533295.758:7925): pid=22942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16579 res=0 [ 1995.152671] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1995.178860] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:36 executing program 3: r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x80c00) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @empty}, 0x2, 0x0, 0x4}}, 0x2e) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000240)={0x8a, &(0x7f00000002c0)=""/138}) socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000011000d04000000001800000000000000", @ANYRES32=r4, @ANYBLOB="a0bd51e4e74010ef4cad39263f2b9a75d636da5a1f96fc0f50c0d6f3827cae87c3eec1207eafc11fba98a21d7dc9ddc9e313875e56aa6ccaedfed685b136e04ade8fb9ce02f417a85b1b969099aefecff3d776623584bac062fe23fabbf7f7db895e119fecdc79556f"], 0x20}}, 0x0) 18:21:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xf0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:36 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x2) 18:21:36 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x7a, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:36 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x20a842, 0x71) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) [ 1995.523909] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1995.555145] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1995.572358] audit: type=1804 audit(1574533296.248:7926): pid=22970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/654/file0/file0" dev="sda1" ino=16977 res=1 18:21:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x716, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:36 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x64) [ 1995.617943] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1995.636495] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:36 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1e5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000e4b9686f0011000d040000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 18:21:36 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', r3}) fchdir(r0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x840c5, 0xf11294b6199ce90b) r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r4, r5, 0x0, 0x10000) [ 1995.690450] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1995.747136] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1995.771864] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xec0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1995.790369] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:36 executing program 3: socket$kcm(0x10, 0x5, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:21:36 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xad, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xf00, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1996.021154] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x1607, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:36 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) prlimit64(r0, 0x0, &(0x7f0000000280)={0x3, 0xff}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) [ 1996.114168] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:36 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x1f, &(0x7f0000000040)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000180)=@v1={0x2, "887adde89ad84707dac7a71a2477"}, 0xf, 0x1) 18:21:36 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xc00e, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1996.255068] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1996.330820] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r1 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r2 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000000)={0x0, @reserved}) ioctl$NBD_CLEAR_QUE(r1, 0xab05) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r5, @ANYBLOB="00000300000004c12f16d474ef81be171da61acbc52a41578dd25b0033638580a3913e75d083f737e4a295eeae056fcdb4bc16cfece00b764db0942e589545eb95c689460343033872f69b3dbca4a0271b92e73266055436d65c977978751fef25d2f22dd4079f4de0b8d8a500f3cf17f4d8f7f70ae6768306f57e109ddbe738612f9b9161afda5c8632d41d527bbe87294d8c07cbd14cb378f602591f30c54e4ebf92fa312ce90a185c095d1aea70be6cc5c88e"], 0x20}}, 0x0) 18:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xf000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1996.378785] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1996.411855] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:37 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) socketpair(0xa, 0x3406c9c689c0d6ba, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x4, 0x1]}, &(0x7f00000000c0)=0x8) [ 1996.463731] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1996.495626] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x34000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x20000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:37 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x228, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x2, @name="36717f003f01dbe584054962a9ceeb27146ff14e4d82f8a647fd395bcbc8811a"}, 0x8, 0x10000, 0x1}) 18:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x400300, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1996.722550] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000240)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x64594345c817684d, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3d3) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) 18:21:37 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xc1200016ba73d03e, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) r3 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r3, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) write$UHID_DESTROY(r3, &(0x7f0000000000), 0xfe0e) 18:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xf0ffff, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1996.808463] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x22000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:37 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\a\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 1996.922996] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1996.973006] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x1000000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1997.020792] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23079 comm=syz-executor.3 [ 1997.025721] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x2000000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:37 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80300, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000040)=0x10000) sendfile(r1, r2, 0x0, 0x10000) [ 1997.072612] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1997.100451] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1997.148136] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1997.193645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=23093 comm=syz-executor.3 18:21:37 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x22010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:37 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x300, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xf000000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:38 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40082, 0x6) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r2, r3/1000+10000}}) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f00000002c0)="080adf101ad13226dcb05034378ae45688d30de5efae20ead0fe687ae63b7ad59de6974edecb64f5339485d70f729b820f9c9ab1fe2aa24639be5272b16bc9c0cf16abea90d5b6ca7c3d6f08dda01ba24a139f6fd7232d826e77430f8517745a693abbd10c849cb66076aca642711306b7437072") getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="0001000000000000"], 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f00000001c0)) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCLINUX3(r8, 0x541c, &(0x7f0000000180)) [ 1997.347952] kauditd_printk_skb: 10 callbacks suppressed [ 1997.347968] audit: type=1804 audit(1574533298.018:7937): pid=23098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/659/file0/file0" dev="loop1" ino=532 res=1 [ 1997.348840] QAT: Invalid ioctl 18:21:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x16070000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1997.353687] audit: type=1800 audit(1574533298.018:7938): pid=23098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=532 res=0 [ 1997.413204] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1997.477784] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1997.519063] QAT: Invalid ioctl 18:21:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x9effffff, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2c000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1997.540060] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1997.553370] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:38 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0xaaaaaaaaaaaaaec, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x6008, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80800, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) fadvise64(r4, 0xffffffff, 0x4, 0x3) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r1, r2, 0x0, 0x10000) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140)={0x8001, 0x5, 0xcb, 0x8000}, 0x8) [ 1997.598690] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xc00e0000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1997.658325] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1997.695872] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1997.711501] net_ratelimit: 22 callbacks suppressed [ 1997.711510] protocol 88fb is buggy, dev hsr_slave_0 [ 1997.721619] protocol 88fb is buggy, dev hsr_slave_1 [ 1997.755127] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:38 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x410, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xf0ffffff, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:38 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1997.871501] protocol 88fb is buggy, dev hsr_slave_0 [ 1997.876682] protocol 88fb is buggy, dev hsr_slave_1 [ 1997.886926] audit: type=1804 audit(1574533298.558:7939): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/660/file0" dev="sda1" ino=16552 res=1 18:21:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xfffff000, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1998.019545] audit: type=1800 audit(1574533298.588:7940): pid=23139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16552 res=0 [ 1998.056978] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:38 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) 18:21:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xffffff7f, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1998.096239] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1998.112983] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1998.132563] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1998.166535] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1998.205055] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 1998.249220] audit: type=1804 audit(1574533298.918:7941): pid=23162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/661/file0/file0" dev="loop1" ino=533 res=1 18:21:39 executing program 3: socket$kcm(0x10, 0x100000000000003, 0x0) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r2, @ANYBLOB="000000f0ff4a0000"], 0x20}}, 0x0) 18:21:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x40000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xffffff9e, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:39 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x429, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:39 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000580)={{0x3, 0x5, 0xfffffffa, 0x0, 'syz1\x00', 0x8}, 0x1, [0x50, 0x0, 0x2400000, 0x1, 0x6, 0x80, 0x3, 0x800, 0x9, 0x5, 0x0, 0x2, 0x9c3, 0x5, 0xc6, 0x6, 0x9, 0x6, 0x3, 0x3356, 0x6, 0x3, 0x3, 0x9, 0x7, 0x3, 0x4b7, 0xffffffffffff8001, 0x4, 0xffffffff80000000, 0x4, 0x1, 0x9, 0x79, 0x1, 0x1f, 0x1000, 0x400, 0x8, 0x7fffffff, 0x100000000000000, 0x2, 0x10000, 0x1, 0x5, 0x401, 0x4ac, 0xdc, 0x7, 0x100000000000, 0x2, 0x7fff, 0x9, 0x7, 0x1, 0x86f, 0x8001, 0x2e2, 0xffffffff, 0x3f, 0x4, 0x6, 0x6, 0x0, 0xb7, 0x20e, 0x0, 0x4, 0x8, 0x76d, 0xfffffffffffffffe, 0x10000, 0x7fffffff, 0x4, 0x0, 0x1, 0x1, 0xfff, 0xba8d, 0x400, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1000, 0x4, 0x3, 0x8, 0x0, 0x0, 0x0, 0xd1, 0x9, 0x1000, 0x200, 0x3, 0x8, 0x0, 0x7fffffff, 0x0, 0x400, 0x1, 0x1, 0x1, 0x1, 0x9, 0x1, 0x7, 0x9, 0x1, 0x0, 0x100000001, 0x1, 0x9ca, 0x7, 0x8, 0x0, 0x2, 0xff, 0x8, 0x0, 0x0, 0x3ff, 0x9, 0x7, 0x81]}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x243100) sendfile(r1, r2, 0x0, 0x10000) [ 1998.388897] audit: type=1800 audit(1574533298.958:7942): pid=23162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=533 res=0 [ 1998.480180] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xfffffff0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1998.607435] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:39 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x48, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1998.647841] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1998.681539] protocol 88fb is buggy, dev hsr_slave_0 [ 1998.686720] protocol 88fb is buggy, dev hsr_slave_1 [ 1998.691893] protocol 88fb is buggy, dev hsr_slave_0 18:21:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0xffffffff, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1998.696982] protocol 88fb is buggy, dev hsr_slave_1 [ 1998.702282] audit: type=1804 audit(1574533299.368:7943): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/662/file0/file0" dev="loop1" ino=534 res=1 [ 1998.708231] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x48010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:39 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40061, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x80000000}) fchdir(0xffffffffffffffff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r1, r2, 0x0, 0x10000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r3}}, 0x18) [ 1998.812678] audit: type=1800 audit(1574533299.368:7944): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=534 res=0 18:21:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1998.920996] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x3}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1998.980374] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1999.008450] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:39 executing program 3: r0 = socket(0x400000000010, 0x2, 0x0) mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x3000) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000000)="2400000020002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 18:21:39 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404001}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x2, 0x70bd2b, 0xfff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc62}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008005}, 0x40804) sendfile(r1, r2, 0x0, 0x10000) [ 1999.093473] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:39 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x437, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 1999.151653] protocol 88fb is buggy, dev hsr_slave_0 [ 1999.156802] protocol 88fb is buggy, dev hsr_slave_1 18:21:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x4}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:39 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4b020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 1999.274626] audit: type=1804 audit(1574533299.938:7945): pid=23225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir889778667/syzkaller.5ArCHE/664/file0/file0" dev="loop1" ino=535 res=1 18:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x5}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x2fe1, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000000)) read(r3, &(0x7f0000000040)=""/11, 0xb) r4 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r4, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r4, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) syz_open_pts(r4, 0x20c00) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f00000001c0)={r6}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0xff35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b4, 0x0, 0x0, 0x7b6b84d5}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f00000000c0)={0x39, 0x0, 0x0, 0x0, 0x6, 0x8001, 0x0, 0xaa}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x90200, 0x0) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f00000002c0)) socket(0x0, 0x0, 0x0) [ 1999.431534] audit: type=1800 audit(1574533300.008:7946): pid=23225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=535 res=0 [ 1999.466457] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:40 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) fchdir(r0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r3, r4, 0x0, 0x10000) 18:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x6}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1999.500816] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1999.521606] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1999.632401] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:40 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x58000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:40 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) prlimit64(r0, 0x0, &(0x7f0000000280)={0x0, 0x8000000000000000}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:21:40 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x438, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x8}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 1999.919106] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2000.024491] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:40 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) chroot(&(0x7f0000000000)='./file1\x00') sendfile(r1, r2, 0x0, 0x10000) 18:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x9}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:40 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xa}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2000.209885] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2000.220650] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2000.271634] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:41 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)=""/245, &(0x7f0000000140)=0xf5) r1 = semget(0x2, 0x3, 0xa0) semtimedop(r1, &(0x7f0000000180)=[{0x2, 0x4}, {0xb, 0x9, 0x1c00}, {0x3, 0x6, 0x2000}, {0x0, 0xb02c, 0x800}, {0x2, 0xf02a, 0x800}, {0x4, 0x1c00, 0x2800}, {0x2, 0xc8, 0x1000}, {0x1, 0x200, 0x1000}, {0x2, 0x3, 0x1c00}], 0x9, &(0x7f00000001c0)={0x0, 0x989680}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x1255cdf26ed6ecd, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x3ff}, 0x8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x140000, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x5, {0x2, 0x7b, 0x3, 0x0, 0x4, 0xfe}, 0x0, 0x2}, 0xe) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000300)=0x1) r4 = socket$isdn(0x22, 0x3, 0x10) getsockname(r4, &(0x7f0000000340)=@nl=@unspec, &(0x7f00000003c0)=0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2, 0x0) write$P9_RRENAME(r5, &(0x7f0000000440)={0x7, 0x15, 0x1}, 0x7) r6 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x101000) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000004c0)={0x0, 0x10000}) setsockopt$netrom_NETROM_T4(r5, 0x103, 0x6, &(0x7f0000000500)=0x6, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x8000, @loopback, 0x1}, @in={0x2, 0x4e23, @rand_addr=0x10000}, @in={0x2, 0x4e23, @multicast1}], 0x3c) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x5a8000, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r7, 0x8008ae9d, &(0x7f0000000600)=""/94) lgetxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@random={'osx.', 'keyring\x00'}, &(0x7f0000000700)=""/162, 0xa2) r8 = accept4(0xffffffffffffffff, &(0x7f00000007c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f0000000840)=0x80, 0x83e5ee65166fa7d4) getsockname$packet(0xffffffffffffffff, &(0x7f00000051c0)={0x11, 0x0, 0x0}, &(0x7f0000005200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000005240)={'vxcan0\x00', r9}) r10 = syz_open_dev$radio(&(0x7f0000005280)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_GET_NESTED_STATE(r10, 0xc080aebe, &(0x7f00000052c0)={0x0, 0x0, 0x2080}) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f0000007340)='/dev/vcs\x00', 0x4000, 0x0) ioctl$PPPIOCGDEBUG(r11, 0x80047441, &(0x7f0000007380)) r12 = semget$private(0x0, 0x2, 0x8) semop(r12, &(0x7f00000073c0)=[{0x3, 0x7fe0, 0x1800}, {0x1, 0x1000, 0x1000}], 0x2) 18:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xb}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2000.395317] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2000.412585] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2000.476083] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:41 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x347, 0xfffffffffffffffe}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x602040, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000580)={0x0, 0x0, 0x2080}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r2, r3, 0x0, 0x10000) 18:21:41 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x442, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xc}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x60000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:41 executing program 3: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x42424242, @ANYBLOB="5042000090780000"], 0x0) 18:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2000.716261] FAT-fs (loop1): bogus number of reserved sectors [ 2000.763940] FAT-fs (loop1): Can't find a valid FAT filesystem 18:21:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d638ca7539f6abad564c9fb6f0e703733372c757365667265652c73686f72746e616d653d6c6f18ac1856cdda079264967765722c005a7894f5448a98f757a4c458db8ebe1944da0478eb3b3221eaf782cf9b6065b5dba2a7a82114252a9d"]) [ 2000.802009] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2000.834105] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x2}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2000.870859] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2000.890610] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:41 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280), 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2314, 0x200000) linkat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) sendfile(r3, r4, 0x0, 0x10000) 18:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0xf}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x64030000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2001.025005] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:41 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) getsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f00000000c0)=""/97, &(0x7f0000000040)=0x61) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="200000000000b467ee9a8d2a86000000", @ANYRES32=r4], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x1, 0xf3d, 0x8, 0x1, 0x3, 0x0, 0x7, 0x5, r4}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x1ff}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff67, &(0x7f00000bfff0)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 18:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2001.131306] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:41 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x443, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:41 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x66020000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0x2}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0xf}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6b6b6b00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0xf0}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2001.464647] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2001.489838] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2001.504465] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0x716}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2001.586131] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:42 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000200)=0x4b1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7}) r5 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES16=r6, @ANYBLOB="15472bbd7000fcdbdf2512000000640004001c0007000800030002000000080004000500000008000300010000001400010062726f6164636173742d6c696e6b00002c00070008000300040000000800020008000000080002000c0000000800010005000000080004000500000004000700300004002c000700080003008e66000008000400ffff0000080004000620d627080004000400000008000100120000000c00090008000100e30a00002c00090008000200030000000800020007000000080002000000000008000200ff0000000800010004000000580001000c00010069623a65716c0000100001007564703a73797a320000000038000400200001000a004e2380000004fe8000000000000000000000004000aa0010d1001400020002004e24000000090000000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x44040}, 0x2000086) 18:21:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6f010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0xec0}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2001.892733] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2001.940655] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:42 executing program 3: ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x2000200, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e66610003020401f7b3", 0x11}], 0x8000, 0x0) r0 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2e, 0x6, 0x0, {0x2, 0x4, 0x5, 0x0, 'vfat\x00'}}, 0x2e) 18:21:42 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x444, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0xf00}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x8cffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0x1607}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) dup(r0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0xc00e}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2002.186344] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) 18:21:42 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb0010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2002.262048] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0xf000}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2002.304374] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd, 0x0, 0xffff}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2002.370366] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc0ed0000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x3, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:43 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x445, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0xc, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0xd, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2002.595378] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2002.618323] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 18:21:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd4010000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2002.699393] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2002.733828] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2002.768890] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2002.801735] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2002.841534] net_ratelimit: 18 callbacks suppressed [ 2002.841543] protocol 88fb is buggy, dev hsr_slave_0 [ 2002.851732] protocol 88fb is buggy, dev hsr_slave_1 [ 2002.856902] protocol 88fb is buggy, dev hsr_slave_0 [ 2002.862038] protocol 88fb is buggy, dev hsr_slave_1 18:21:43 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x446, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0xe, 0x3, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) 18:21:43 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf6ffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:43 executing program 3: socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x8, 0x5c831, 0xffffffffffffffff, 0x0) clone(0x80000, &(0x7f0000000340), &(0x7f0000000400), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) 18:21:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x2, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfeffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0xd, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2003.311555] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.316734] protocol 88fb is buggy, dev hsr_slave_1 [ 2003.346209] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2003.393632] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0xe, @str='\x1c'}]}, 0x1c}}, 0x0) [ 2003.447321] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffff1f00, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2003.528997] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x4801, @str='\x1c'}]}, 0x1c}}, 0x0) 18:21:44 executing program 3: mount(0x0, 0x0, &(0x7f00000001c0)='omfs\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x1b6, 0x20000) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000380)=0x2, &(0x7f00000003c0)=0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000400)={0xb}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) dup2(0xffffffffffffffff, r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0x8001}}, 0x5, 0x5, 0x1, 0x3, 0x80}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000740)=0x200, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0xd10c) flock(0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x104, 0x0, 0x200, 0x70bd25, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'yam0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @loopback}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_mount_image$msdos(0x0, &(0x7f0000000500)='./file0\x00', 0x8, 0x0, &(0x7f0000001900), 0x8, &(0x7f00000019c0)=ANY=[]) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0xc63b9e35) [ 2003.631514] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.636688] protocol 88fb is buggy, dev hsr_slave_1 18:21:44 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x447, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x0f'}]}, 0x1c}}, 0x0) [ 2003.951571] protocol 88fb is buggy, dev hsr_slave_0 [ 2003.956719] protocol 88fb is buggy, dev hsr_slave_1 [ 2003.997654] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2004.035064] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) 18:21:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffff000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x14'}]}, 0x1c}}, 0x0) [ 2004.048672] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2004.076738] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:44 executing program 3: getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0xe9484f786a3bb8e4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socket(0x10, 0x400000000080803, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240), 0x8) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000001140)=@alg, &(0x7f00000011c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001200)=@assoc_value={0x0, 0x6}, &(0x7f0000001240)=0x8) getpgrp(r0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x0, &(0x7f00000000c0)="0800a1695e1d") socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r6 = socket(0x10, 0x80002, 0x0) write(r6, &(0x7f0000000100)="2600000022004701060000000000000002000000002b1f0097d2447bcd289834b01500000000", 0x26) read(r6, &(0x7f0000000000)=""/234, 0xea) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080), 0xfffffffffffffcfa) connect$inet6(0xffffffffffffffff, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) sendto$inet(r7, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 18:21:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\xc0'}]}, 0x1c}}, 0x0) 18:21:44 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x448, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:44 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffff7f, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\xc0'}]}, 0x1c}}, 0x0) 18:21:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\xe0'}]}, 0x1c}}, 0x0) [ 2004.479906] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2004.507616] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2004.551751] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:45 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xffffff8c, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x9c'}]}, 0x1c}}, 0x0) [ 2004.609722] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:45 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x449, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) 18:21:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x00'}]}, 0x1c}}, 0x0) 18:21:45 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffffff6, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2004.957980] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:45 executing program 3: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file1\x00', 0x4000000000000000, 0x1, &(0x7f0000000980)=[{&(0x7f0000000200)='XFSB', 0x4}], 0x8000, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/241, 0xf1) [ 2005.046029] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2005.071546] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock 18:21:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\xef'}]}, 0x1c}}, 0x0) 18:21:45 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xfffffffe, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:45 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @remote}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}, "0020010000000000"}}}}}, 0x0) [ 2005.132412] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:45 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x44a, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0xf}}, 0x0) 18:21:45 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8900000, 0x6}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x36}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() mq_open(&(0x7f0000000280)='-usersystemGPL\x00', 0x0, 0x4, &(0x7f0000000080)={0x0, 0x4, 0x3, 0xe0000002, 0x6c53}) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0xfffffc28) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x27b, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) sendto(r1, &(0x7f0000000240)="b1193ec96f8d4d5d588a0f24f357a72423d1422c87b49c80a0ed1533420424e0a1f183e57f8c4c542fcb4157cbd23f6686980b320bcf", 0xfffffffffffffe86, 0x40, 0x0, 0x0) close(0xffffffffffffffff) accept$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f00000000c0)=0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r3, r4, 0x0, 0x80000003) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x400000000001b, &(0x7f0000000000), 0x4) sendto(r6, &(0x7f0000000240)="b1193ec96f8d4d5d588a0f24f357a72423d1422c87b49c80a0ed1533420424e0a1f183e57f8c4c542fcb4157cbd23f6686980b320bcf", 0xfffffffffffffe86, 0x40, 0x0, 0x0) close(0xffffffffffffffff) accept$inet(r6, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000600)='b\x10ide_Xh\xfa\\e_1\x00', 0x2f8) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) sendto(r5, &(0x7f0000000280)="b1193ec96f8d4d5d588a0f24f3575c5223d14a75e09b5f701b6cf69c808b2515669690400850a90424e0a1f1f3d1ce564b83e57f8c4c00000000000000000051810000000084371d5c5155d77c38", 0x4e, 0x40, 0x0, 0x0) close(r5) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000600)='veth1\x00', 0x3aa) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000600)='veth1\x00', 0x2e4) connect$inet(r7, &(0x7f0000000100)={0x2, 0xfffd, @loopback}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x4000000000013, &(0x7f0000000000), 0x4) sendto(r7, &(0x7f0000000280)="b1193ec96f8d4d5d588a0f24f3575c5223d14a75e09b5f701b6cf69c808b2515669690400850a90424e0a1f1f3d1ce564b83e57f8c4c00000000000000000051810000000084371d5c5155d77c38bd2e73", 0xff0b, 0x40, 0x0, 0x278) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000600)='veth1\x00', 0x3aa) close(r7) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x190, 0x20000000080, 0x0) 18:21:46 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xedc000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x14}}, 0x0) [ 2005.385193] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2005.417023] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2005.447196] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2005.518452] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 18:21:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) fcntl$dupfd(r6, 0x0, r6) 18:21:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0xc0}}, 0x0) 18:21:46 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x44b, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:46 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:46 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0xfffffff9}, 0x10) r1 = creat(0x0, 0x44) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x8) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={r4, 0x140000, r5}) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='\xafd\r\xdc\x88`KKkc0\x00', 0x408000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000001, 0x13, r1, 0x0) r2 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80c00) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000300)=0xfffffffffffffe03, 0x181400) poll(&(0x7f0000000000)=[{r1, 0x9400}, {r2}, {r1, 0x6008}, {0xffffffffffffffff, 0x40}], 0x4, 0x20) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:21:46 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6b6b6b00000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2005.927348] [ 2005.929033] ====================================================== [ 2005.935362] WARNING: possible circular locking dependency detected [ 2005.941686] 4.19.85-syzkaller #0 Not tainted [ 2005.946092] ------------------------------------------------------ [ 2005.952416] syz-executor.1/13432 is trying to acquire lock: [ 2005.958215] 0000000064395a3d (&mm->mmap_sem){++++}, at: __might_fault+0xfb/0x1e0 [ 2005.965771] [ 2005.965771] but task is already holding lock: [ 2005.971745] 00000000d51c8b5d (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 [ 2005.974476] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2005.979577] [ 2005.979577] which lock already depends on the new lock. [ 2005.979577] [ 2005.979581] [ 2005.979581] the existing dependency chain (in reverse order) is: [ 2005.979585] [ 2005.979585] -> #1 (&rp->fetch_lock){+.+.}: [ 2005.979614] __mutex_lock+0xf7/0x1300 [ 2005.979630] mutex_lock_nested+0x16/0x20 [ 2005.986174] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2005.994349] mon_bin_vma_fault+0x73/0x2d0 [ 2005.994363] __do_fault+0x111/0x480 [ 2005.994372] __handle_mm_fault+0xf6d/0x3f80 [ 2005.994381] handle_mm_fault+0x1b5/0x690 [ 2005.994389] __get_user_pages+0x609/0x17a0 [ 2005.994408] populate_vma_page_range+0x20d/0x2a0 [ 2006.054206] __mm_populate+0x204/0x380 [ 2006.058599] vm_mmap_pgoff+0x213/0x230 [ 2006.062999] ksys_mmap_pgoff+0x4aa/0x630 [ 2006.067649] __x64_sys_mmap+0xe9/0x1b0 [ 2006.072047] do_syscall_64+0xfd/0x620 [ 2006.076355] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2006.082565] [ 2006.082565] -> #0 (&mm->mmap_sem){++++}: [ 2006.088102] lock_acquire+0x16f/0x3f0 [ 2006.092419] __might_fault+0x15e/0x1e0 [ 2006.096819] mon_bin_fetch+0x26f/0x340 [ 2006.101210] mon_bin_ioctl+0x21e/0xc80 [ 2006.105602] do_vfs_ioctl+0xd5f/0x1380 [ 2006.109992] ksys_ioctl+0xab/0xd0 [ 2006.113956] __x64_sys_ioctl+0x73/0xb0 [ 2006.118353] do_syscall_64+0xfd/0x620 [ 2006.122668] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2006.128353] [ 2006.128353] other info that might help us debug this: [ 2006.128353] [ 2006.136649] Possible unsafe locking scenario: [ 2006.136649] [ 2006.142687] CPU0 CPU1 [ 2006.147343] ---- ---- [ 2006.151989] lock(&rp->fetch_lock); [ 2006.155685] lock(&mm->mmap_sem); [ 2006.161725] lock(&rp->fetch_lock); [ 2006.167940] lock(&mm->mmap_sem); [ 2006.171470] [ 2006.171470] *** DEADLOCK *** [ 2006.171470] [ 2006.178213] 1 lock held by syz-executor.1/13432: [ 2006.182946] #0: 00000000d51c8b5d (&rp->fetch_lock){+.+.}, at: mon_bin_fetch+0x37/0x340 [ 2006.191095] [ 2006.191095] stack backtrace: [ 2006.195580] CPU: 1 PID: 13432 Comm: syz-executor.1 Not tainted 4.19.85-syzkaller #0 [ 2006.203356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2006.212692] Call Trace: [ 2006.215267] dump_stack+0x197/0x210 [ 2006.218884] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 2006.224244] __lock_acquire+0x2e19/0x49c0 [ 2006.228376] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2006.233531] ? remove_wait_queue+0x10f/0x190 [ 2006.237945] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 2006.243042] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2006.247610] ? mark_held_locks+0x100/0x100 [ 2006.251841] lock_acquire+0x16f/0x3f0 [ 2006.255634] ? __might_fault+0xfb/0x1e0 [ 2006.259596] __might_fault+0x15e/0x1e0 [ 2006.263466] ? __might_fault+0xfb/0x1e0 [ 2006.267427] mon_bin_fetch+0x26f/0x340 [ 2006.271306] mon_bin_ioctl+0x21e/0xc80 [ 2006.275180] ? mon_bin_get_event+0x450/0x450 [ 2006.279576] ? __might_sleep+0x95/0x190 [ 2006.283531] ? mon_bin_get_event+0x450/0x450 [ 2006.287922] do_vfs_ioctl+0xd5f/0x1380 [ 2006.291797] ? selinux_file_ioctl+0x46f/0x5e0 [ 2006.296275] ? selinux_file_ioctl+0x125/0x5e0 [ 2006.300763] ? ioctl_preallocate+0x210/0x210 [ 2006.305158] ? selinux_file_mprotect+0x620/0x620 [ 2006.309898] ? _copy_to_user+0xc9/0x120 [ 2006.313871] ? put_timespec64+0xda/0x140 [ 2006.317914] ? nsecs_to_jiffies+0x30/0x30 [ 2006.322053] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2006.327577] ? security_file_ioctl+0x8d/0xc0 [ 2006.331971] ksys_ioctl+0xab/0xd0 [ 2006.335409] __x64_sys_ioctl+0x73/0xb0 [ 2006.339291] do_syscall_64+0xfd/0x620 [ 2006.343077] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2006.348248] RIP: 0033:0x45a639 [ 2006.351433] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2006.370325] RSP: 002b:00007f479938cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2006.378104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a639 [ 2006.385369] RDX: 0000000020000100 RSI: 00000000c0109207 RDI: 0000000000000003 [ 2006.392633] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 2006.399889] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f479938d6d4 [ 2006.407150] R13: 00000000004c416b R14: 00000000004d8770 R15: 00000000ffffffff [ 2006.417528] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0xec0}}, 0x0) [ 2006.435045] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2006.446419] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2006.457340] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2006.470841] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x33fe0}}, 0x0) 18:21:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf0ffffffffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2006.478408] kobject: 'loop5' (0000000000a08bf3): kobject_add_internal: parent: 'ext4', set: '' [ 2006.496724] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2006.520772] kobject: 'loop5' (0000000000a08bf3): kobject_cleanup, parent (null) 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x2000009c}}, 0x0) [ 2006.534098] kobject: 'loop5' (0000000000a08bf3): calling ktype release [ 2006.540980] kobject: 'loop5': free name [ 2006.561728] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2006.568357] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x7ffff000}}, 0x0) [ 2006.581659] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2006.588194] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2006.657680] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2006.664369] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) fcntl$dupfd(r6, 0x0, r6) 18:21:47 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0xac}, 0x2) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0xfffffdef}}, 0x0) 18:21:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x100000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:47 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf0ffffffffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:47 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x44c, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x2}, 0x0) 18:21:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x200000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2006.788907] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2006.821014] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:47 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf0ffffffffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x8}, 0x0) [ 2006.848983] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2006.864436] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2006.866654] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2006.871013] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2006.913196] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2006.916178] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2006.940835] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2006.953809] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0xd}, 0x0) 18:21:47 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x300000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2006.977499] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2006.997425] kobject: 'loop5' (000000005c4a3cc3): kobject_add_internal: parent: 'ext4', set: '' [ 2007.014757] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2007.032415] kobject: 'loop5' (000000005c4a3cc3): kobject_cleanup, parent (null) [ 2007.040773] kobject: 'loop5' (000000005c4a3cc3): calling ktype release [ 2007.053660] kobject: 'loop5': free name [ 2007.091752] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2007.098302] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2007.108852] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2007.129840] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) fcntl$dupfd(r6, 0x0, r6) 18:21:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0xe}, 0x0) 18:21:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x400000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:48 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xf0ffffffffffff, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:48 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x44d, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[], 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x200000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x300}, 0x0) [ 2007.624940] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2007.653542] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x500000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0xffffff1f}, 0x0) [ 2007.701484] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2007.716454] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2007.719525] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2007.739434] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2007.759072] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2007.778098] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:48 executing program 2: syz_read_part_table(0x1ff, 0x273, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:48 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x2}, 0x0) [ 2007.801736] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2007.839215] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2007.848082] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2007.867283] kobject: 'loop5' (00000000c0a38f2e): kobject_add_internal: parent: 'ext4', set: '' [ 2007.885715] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2007.897036] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2007.904142] kobject: 'loop5' (00000000c0a38f2e): kobject_cleanup, parent (null) [ 2007.904152] kobject: 'loop5' (00000000c0a38f2e): calling ktype release [ 2007.904158] kobject: 'loop5': free name [ 2007.924663] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2007.944088] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2007.950547] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf}, 0x0) 18:21:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x600000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:49 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xe46, 0x0) r0 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:49 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 18:21:49 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x44e, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2008.431506] net_ratelimit: 22 callbacks suppressed [ 2008.431513] protocol 88fb is buggy, dev hsr_slave_0 [ 2008.431537] protocol 88fb is buggy, dev hsr_slave_1 [ 2008.436531] protocol 88fb is buggy, dev hsr_slave_1 18:21:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf0}, 0x0) 18:21:49 executing program 2: r0 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) signalfd(r0, &(0x7f0000000000)={0x7}, 0x8) r1 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000340)={0x8ebb9437582242b9, 0x6d, 0x1}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x800, 0x0) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0xfe98, 0x69, 0x2, {0xa1, 0x1, 0x9}}, 0xfffffffffffffffe) syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 2008.497589] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2008.519227] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2008.539904] overlayfs: failed to resolve './file0': -2 18:21:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x700000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:49 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x716}, 0x0) [ 2008.575820] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2008.586352] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2008.594875] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2008.597100] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:49 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x88200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r2, 0xfc373bf004be72e5}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000408}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 2008.653583] overlayfs: failed to resolve './file0': -2 [ 2008.667018] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:49 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xec0}, 0x0) 18:21:49 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x800000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2008.704017] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2008.735856] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2008.739700] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env 18:21:49 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bind$netrom(r2, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast]}, 0x48) fchdir(r1) creat(&(0x7f0000000280)='./file0\x00', 0x0) [ 2008.765345] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2008.777421] kobject: 'loop5' (0000000084fc6dbc): kobject_add_internal: parent: 'ext4', set: '' [ 2008.779044] overlayfs: failed to resolve './file0': -2 [ 2008.791039] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2008.823985] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2008.834050] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2008.844877] kobject: 'loop5' (0000000084fc6dbc): kobject_cleanup, parent (null) [ 2008.854319] kobject: 'loop5' (0000000084fc6dbc): calling ktype release [ 2008.861812] kobject: 'loop5': free name [ 2008.901764] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2008.908290] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2009.071484] protocol 88fb is buggy, dev hsr_slave_0 [ 2009.076611] protocol 88fb is buggy, dev hsr_slave_1 [ 2009.081751] protocol 88fb is buggy, dev hsr_slave_0 [ 2009.086871] protocol 88fb is buggy, dev hsr_slave_1 18:21:50 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf00}, 0x0) 18:21:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x900000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 18:21:50 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x500, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2009.342563] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2009.349036] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x1607}, 0x0) 18:21:50 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xa00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2009.393750] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2009.400416] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2009.429054] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env 18:21:50 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 2009.438907] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2009.451334] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xc00e}, 0x0) 18:21:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xb00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2009.491368] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2009.533052] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2009.551535] protocol 88fb is buggy, dev hsr_slave_0 [ 2009.555604] kobject: 'loop5' (00000000205fbc45): kobject_add_internal: parent: 'ext4', set: '' [ 2009.556646] protocol 88fb is buggy, dev hsr_slave_1 [ 2009.566620] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2009.576663] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2009.586842] kobject: 'loop5' (00000000205fbc45): kobject_cleanup, parent (null) [ 2009.589192] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2009.596403] kobject: 'loop5' (00000000205fbc45): calling ktype release [ 2009.621249] kobject: 'loop5': free name 18:21:50 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000000)={0x1, [0x9]}) 18:21:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xc00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:50 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf000}, 0x0) [ 2009.671667] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2009.678851] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2009.724575] overlayfs: failed to resolve './file1': -2 [ 2009.766737] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2009.778999] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2009.871492] protocol 88fb is buggy, dev hsr_slave_0 18:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x34000}, 0x0) 18:21:50 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:50 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x600, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) 18:21:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0xd00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2010.193065] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2010.199564] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2010.217564] overlayfs: failed to resolve './file1': -2 [ 2010.228834] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env 18:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x400300}, 0x0) [ 2010.235856] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2010.249248] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2010.259204] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2010.272296] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2010.281825] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env 18:21:50 executing program 3: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2010.288274] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2010.308951] kobject: 'loop5' (0000000064349e94): kobject_add_internal: parent: 'ext4', set: '' [ 2010.326888] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2010.345838] kobject: 'loop5' (0000000064349e94): kobject_cleanup, parent (null) [ 2010.348953] overlayfs: failed to resolve './file1': -2 [ 2010.360605] kobject: 'loop5' (0000000064349e94): calling ktype release [ 2010.361609] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2010.367537] kobject: 'loop5': free name [ 2010.376257] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2010.402315] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2010.410674] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:51 executing program 2: syz_read_part_table(0x0, 0x11a, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf0ffff}, 0x0) 18:21:51 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2200000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:51 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x700, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) [ 2010.564446] overlayfs: failed to resolve './file1': -2 18:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x1000000}, 0x0) 18:21:51 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$KDDISABIO(r0, 0x4b37) [ 2010.592686] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2010.602248] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2010.623654] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2010.631729] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2010.635237] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2010.654430] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2010.675866] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2010.711167] kobject: 'loop5' (00000000cc3e701e): kobject_add_internal: parent: 'ext4', set: '' [ 2010.723380] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2010.733220] kobject: 'loop5' (00000000cc3e701e): kobject_cleanup, parent (null) [ 2010.741857] kobject: 'loop5' (00000000cc3e701e): calling ktype release [ 2010.749618] kobject: 'loop5': free name [ 2010.791795] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2010.798474] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) 18:21:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2201000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:51 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x2000000}, 0x0) 18:21:51 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4, 0x0, 0x0, r3}}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xff, 0x4, 0xe8d}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={r3, 0xbe5, 0x40, 0x5c, 0x40, 0x9, 0xdac6, 0x6, {r4, @in6={{0xa, 0x4e23, 0x5f7, @local}}, 0x3, 0x240, 0xfffffffc, 0x0, 0xffffffad}}, &(0x7f0000000140)=0xb0) 18:21:51 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x900, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf000000}, 0x0) [ 2011.020670] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2011.034698] overlayfs: failed to resolve './file1': -2 [ 2011.055058] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:51 executing program 3: mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2c00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2011.095620] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2011.102392] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2011.131186] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2011.139932] overlayfs: failed to resolve './file1': -2 18:21:51 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open(0x0, 0x200000, 0x42) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) ioctl$NBD_DO_IT(r0, 0xab03) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) 18:21:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x16070000}, 0x0) [ 2011.145325] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2011.147257] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2011.199154] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2011.205022] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2011.223499] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:51 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 2011.245707] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2011.293741] kobject: 'loop5' (0000000039206b2c): kobject_add_internal: parent: 'ext4', set: '' [ 2011.307931] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2011.317151] kobject: 'loop5' (0000000039206b2c): kobject_cleanup, parent (null) [ 2011.325817] kobject: 'loop5' (0000000039206b2c): calling ktype release [ 2011.333089] kobject: 'loop5': free name [ 2011.361621] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2011.368228] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) 18:21:52 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x3f00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x9effffff}, 0x0) 18:21:52 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x8) r1 = creat(0x0, 0x44) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000003c0)={0x34, 0x0, &(0x7f0000000180)}) accept4(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x5}, 0x4) 18:21:52 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:52 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xc00e0000}, 0x0) [ 2011.868285] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2011.893903] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:52 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:52 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 2011.929863] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2011.946768] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2011.964487] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env 18:21:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) [ 2011.979361] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2011.997376] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2012.011537] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2012.013607] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xfffff000}, 0x0) 18:21:52 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 2012.021398] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2012.043258] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2012.088199] kobject: 'loop5' (000000005bd6af47): kobject_add_internal: parent: 'ext4', set: '' [ 2012.103094] overlayfs: failed to resolve './file0': -2 [ 2012.108899] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2012.117583] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2012.124868] kobject: 'loop5' (000000005bd6af47): kobject_cleanup, parent (null) [ 2012.131837] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2012.134386] kobject: 'loop5' (000000005bd6af47): calling ktype release [ 2012.150726] kobject: 'loop5': free name [ 2012.192113] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2012.198683] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) r6 = socket$inet6(0xa, 0x201000000000002, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$FUSE_DIRENTPLUS(r7, 0x0, 0x0) 18:21:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xffffff7f}, 0x0) 18:21:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4801000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:53 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc00, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:53 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:53 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000000)=""/117) 18:21:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xffffff9e}, 0x0) [ 2012.706469] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2012.733895] overlayfs: failed to resolve './file0': -2 [ 2012.739545] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x4b02000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:53 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 2012.774963] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2012.786123] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xfffffff0}, 0x0) [ 2012.819831] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2012.830898] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2012.839815] overlayfs: failed to resolve './file0': -2 [ 2012.849120] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 18:21:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x40030000000000}, 0x0) [ 2012.865435] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2012.879857] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2012.907092] kobject: 'loop5' (0000000043c52034): kobject_add_internal: parent: 'ext4', set: '' 18:21:53 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 2012.917360] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2012.932647] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2012.952829] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2012.979433] kobject: 'loop5' (0000000043c52034): kobject_cleanup, parent (null) [ 2012.990283] kobject: 'loop5' (0000000043c52034): calling ktype release [ 2012.997090] kobject: 'loop5': free name [ 2013.031557] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2013.038100] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r6, 0x0, 0x0) 18:21:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5800000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf0ffffffffffff}, 0x0) 18:21:54 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:54 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:54 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)={0x38, r1, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x0, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x1d}, 0x1, 0x0, 0x0, 0x40008800}, 0x10) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000380)={0x0, 0xb4, 0x4, 0x4, &(0x7f0000ffc000/0x2000)=nil, 0x1}) read$FUSE(r0, &(0x7f00000002c0), 0x1000) r2 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000180)) getpid() creat(&(0x7f0000000280)='./file0\x00', 0x0) 18:21:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x100000000000000}, 0x0) [ 2013.590195] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2013.613543] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:54 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, 0x0, &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:54 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) syz_read_part_table(0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000180)="4e9142832d5617ae1256f42c3e76e1727549248f0a8f6a8dd01b83b4ab45c1ecbe707cabcc082f8d51c41d66ecd95455133b1f74cd72182eb2d39a5ead99", 0x3e) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) creat(&(0x7f0000000280)='./file0\x00', 0x10) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) [ 2013.644583] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2013.666720] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2013.671253] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env 18:21:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x5c00000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x200000000000000}, 0x0) [ 2013.698649] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2013.711514] net_ratelimit: 20 callbacks suppressed [ 2013.711525] protocol 88fb is buggy, dev hsr_slave_0 [ 2013.721579] protocol 88fb is buggy, dev hsr_slave_1 [ 2013.735405] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2013.745300] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2013.754749] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2013.767537] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 18:21:54 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) [ 2013.797054] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2013.845685] kobject: 'loop5' (00000000ee0919ac): kobject_add_internal: parent: 'ext4', set: '' [ 2013.856349] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2013.865451] kobject: 'loop5' (00000000ee0919ac): kobject_cleanup, parent (null) [ 2013.874986] kobject: 'loop5' (00000000ee0919ac): calling ktype release [ 2013.882663] kobject: 'loop5': free name [ 2013.921609] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2013.928147] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2014.031514] protocol 88fb is buggy, dev hsr_slave_0 [ 2014.036631] protocol 88fb is buggy, dev hsr_slave_1 18:21:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r6, 0x0, 0x0) 18:21:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf00000000000000}, 0x0) 18:21:55 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/244, &(0x7f0000000100)=0xf4) 18:21:55 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6000000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:55 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:55 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x1607000000000000}, 0x0) [ 2014.432805] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2014.446373] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' 18:21:55 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x0) 18:21:55 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) 18:21:55 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6403000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2014.490217] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2014.512121] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2014.512800] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2014.526210] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0x9effffff00000000}, 0x0) 18:21:55 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x91886fd46a0d8ed9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = accept(r1, &(0x7f0000000140)=@xdp, &(0x7f00000000c0)=0x80) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x5, 0x1, 0x6, {0x0, 0x7530}, {r3, r4/1000+30000}, {0x0, 0x1, 0x1}, 0x1, @can={{0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "9263653bb1b90a2a"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) fcntl$setpipe(r0, 0x407, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, {0x8, 0x7f, 0x1, 0x76d4}}) write(r0, &(0x7f0000000340), 0x41395527) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 2014.559891] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2014.564160] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2014.608489] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2014.608820] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2014.637160] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2014.659474] kobject: 'loop5' (000000007f450d67): kobject_add_internal: parent: 'ext4', set: '' [ 2014.670767] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2014.671503] protocol 88fb is buggy, dev hsr_slave_0 [ 2014.679070] protocol 88fb is buggy, dev hsr_slave_0 [ 2014.684027] protocol 88fb is buggy, dev hsr_slave_1 [ 2014.689037] protocol 88fb is buggy, dev hsr_slave_1 [ 2014.702256] kobject: 'loop5' (000000007f450d67): kobject_cleanup, parent (null) [ 2014.712698] kobject: 'loop5' (000000007f450d67): calling ktype release [ 2014.719549] kobject: 'loop5': free name [ 2014.761726] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2014.768324] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' 18:21:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000080)) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create(0xfffffffa) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f0000000040)) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1ffffff}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x9840, &(0x7f0000000140)={0xa, 0x45, 0x0, @ipv4={[], [], @empty}}, 0x1c) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r6, 0x0, 0x0) 18:21:55 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) 18:21:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xc00e000000000000}, 0x0) 18:21:55 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6602000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:21:55 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0209"], 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001280)=ANY=[@ANYBLOB="e6ff03005400005531fe0500fac9065f076748b4f245", @ANYBLOB="740081008ca31d3f003b54c91df8a31be46a014d43e66871c22ee20ce70f39885b2007369348b27eceb52aec5737ca70af71bee3b7a6117929e7b1d46d38b6a6b6c3285bb01e4d5d627b0f0911da0beb35118732bb0cbf909651c8c600fbde031f3161edefb1ba0706eb9644ce21b8e89e5300004c001f00ff6a4518c96e417975eb8dbfcd05c1"], 0x9d}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21ce, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 18:21:56 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x6f01000000000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 2015.289823] kobject: 'loop1' (00000000f8fddbf3): kobject_uevent_env [ 2015.308606] kobject: 'loop1' (00000000f8fddbf3): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2015.311507] protocol 88fb is buggy, dev hsr_slave_0 [ 2015.323206] protocol 88fb is buggy, dev hsr_slave_1 [ 2015.326763] overlayfs: missing 'lowerdir' 18:21:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0) 18:21:56 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) [ 2015.357119] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2015.364362] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2015.380417] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2015.389924] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2015.396837] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:56 executing program 2: syz_read_part_table(0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = open(0x0, 0x141042, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0xffffffffffffffbc}, 0x12a) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x80, 0xc2, 0x5, 0x3}, {0xffff, 0x1, 0x46, 0x3}, {0x7, 0x3f, 0x2, 0x1}, {0x5, 0x7, 0x6c, 0x4}, {0x4, 0xa7, 0x5, 0x2}, {0x6b, 0x6, 0xf3, 0x1}]}) sched_rr_get_interval(r1, &(0x7f0000000080)) 18:21:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) [ 2015.408937] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 2015.438119] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2015.447849] overlayfs: missing 'lowerdir' [ 2015.458841] kobject: 'loop5' (00000000acb17f3c): kobject_add_internal: parent: 'ext4', set: '' [ 2015.460272] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2015.484955] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 2015.492020] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' 18:21:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0xd}, [@typed={0x8, 0x3, @str='\x1c'}]}, 0x1c}, 0x1, 0xfffffffffffff000}, 0x0) 18:21:56 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, 0x0) [ 2015.536486] kobject: 'loop5' (00000000acb17f3c): kobject_cleanup, parent (null) [ 2015.545877] kobject: 'loop0' (000000006ee686bb): kobject_uevent_env [ 2015.566171] kobject: 'loop0' (000000006ee686bb): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2015.574071] kobject: 'loop5' (00000000acb17f3c): calling ktype release [ 2015.588834] kobject: 'loop5': free name [ 2015.603969] overlayfs: missing 'lowerdir' [ 2015.612381] kobject: 'loop5' (0000000088f5e736): kobject_uevent_env [ 2015.623199] kobject: 'loop5' (0000000088f5e736): fill_kobj_path: path = '/devices/virtual/block/loop5'